public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

AzureMonitor: Exclude ( in second capturing group for CodeQL ReDoS vulnerability (#43494)

Browse Source
This commit is contained in:
Shirley
2021-12-23 15:10:35 +01:00
committed by GitHub
parent b87c737a14
commit 3326c3ab7b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/app/plugins/datasource/grafana-azure-monitor-datasource/log_analytics/querystring_builder.ts
+1 -1
View File
@@ -5,7 +5,7 @@ export default class LogAnalyticsQuerystringBuilder {
generate() { generate() {
let queryString = this.rawQueryString; let queryString = this.rawQueryString;
const macroRegexp = /\$__([_a-zA-Z0-9]+)\(([^\)]*)\)/gi; const macroRegexp = /\$__([_a-zA-Z0-9]+)\(([^()]*)\)/gi;
queryString = queryString.replace(macroRegexp, (match, p1, p2) => { queryString = queryString.replace(macroRegexp, (match, p1, p2) => {
if (p1 === 'contains') { if (p1 === 'contains') {
return this.getMultiContains(p2); return this.getMultiContains(p2);