fix: ReDos regex vulnerability, reported by @dayshift

octokit · Feb 14, 2025 · 12a14f0 · 12a14f0
1 parent 3af20bd
commit 12a14f0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -76,7 +76,7 @@ export class RequestError extends Error {
     if (options.request.headers.authorization) {
       requestCopy.headers = Object.assign({}, options.request.headers, {
         authorization: options.request.headers.authorization.replace(
-          / .*$/,
+          /(?<! ) .*$/,
           " [REDACTED]",
         ),
       });