Commit f675331
committed
fix: use safer email validation regex to prevent ReDoS
Replace the vulnerable email regex with a safer pattern that:
- Uses explicit character class limits instead of negated classes
- Limits local part to 1-64 characters
- Limits domain to 1-255 characters
- Limits TLD to 2-6 characters
- Prevents catastrophic backtracking attacks1 parent c2288fd commit f675331
1 file changed
Lines changed: 1 addition & 1 deletion
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
320 | 320 | | |
321 | 321 | | |
322 | 322 | | |
323 | | - | |
| 323 | + | |
324 | 324 | | |
325 | 325 | | |
326 | 326 | | |
| |||
0 commit comments