Alex Vandiver f1c61fbea1 openapi: Use more carefully-constructed regexes for markdown extension. ...

This removes a false-positive ReDoS, since the input is always
checked-in code.  It also incidentally refactors to make the regexes
be more explicit about the values they expect, and removes unnecessary
capturing groups.

It removes an optional parenthesized status code for fixtures,
unnecessary since 981e4f8946, as well as
optional key-value language options, unnecessary since
a2be9a0e2d.

Thank you to @erik-krogh and @yoff for bringing this to our attention.

2021-10-03 18:49:38 -07:00

5.8 KiB

Raw Blame History

View Raw