Merge pull request #3 from EffectRenan/master

Fix for Denial of Service vulnerability
This commit is contained in:
huntr.dev | the place to protect open source
2021-02-12 07:54:26 +00:00
committed by GitHub
2 changed files with 1 additions and 1 deletions
-1
View File
@@ -38,7 +38,6 @@ function inetChecksite(url, callback) {
const s = util.sanitizeShellString(url);
for (let i = 0; i <= 2000; i++) {
if (!(s[i] === undefined ||
s[i] === ' ' ||
s[i] === '{' ||
s[i] === '}')) {
s[i].__proto__.toLowerCase = util.stringToLower;
+1
View File
@@ -527,6 +527,7 @@ function sanitizeShellString(str) {
s[i] === '\n' ||
s[i] === '\'' ||
s[i] === '`' ||
s[i] === ' ' ||
s[i] === '"')) {
result = result + s[i];
}