Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(id-class-value): fix ineficient regex #1414

Draft
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

bebehr
Copy link

@bebehr bebehr commented Feb 20, 2024

Replacing the capturing group quantifier ( ... )* with a non-capturing group quantifier (?: ... )* to reduce the risk of exponential backtracking.

#1147

Short description of what this resolves:

Reduce risk of exponential backtracking in rule id-class-value

Proposed changes:

Replacing the capturing group quantifier ( ... )* with a non-capturing group quantifier (?: ... )*
to reduce the risk of exponential backtracking.

htmlhint#1147
@github-actions github-actions bot added the core Relates to HTMLHint's core APIs and features label Feb 20, 2024
@bebehr bebehr marked this pull request as draft February 20, 2024 00:26
The positive lookahead assertion `(?= ...)` is used to ensure that the check occurs after the first
lowercase letter and all subsequent characters have been verified to resolve the issue of reference
backtracking

htmlhint#1147
@@ -17,7 +17,7 @@
'The id and class attribute values must be in lowercase and split by a dash.',
},
hump: {
regId: /^[a-z][a-zA-Z\d]*([A-Z][a-zA-Z\d]*)*$/,
regId: /^[a-z](?=[a-zA-Z\d]*$)(?:[a-zA-Z\d]*(?:[A-Z][a-zA-Z\d]*)*)?$/,

Check failure

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings containing many repetitions of 'A'.
@bebehr bebehr marked this pull request as ready for review February 20, 2024 11:43
@bebehr bebehr marked this pull request as draft February 20, 2024 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core Relates to HTMLHint's core APIs and features
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant