Limit str to 100 to avoid ReDoS of 0.3s (#89)

karenyavine · leo · commit caae2988ba2a · 2017-05-16T11:08:29.000+02:00
diff --git a/index.js b/index.js
@@ -46,7 +46,7 @@ module.exports = function(val, options) {
 
 function parse(str) {
   str = String(str);
-  if (str.length > 10000) {
+  if (str.length > 100) {
     return;
   }
   var match = /^((?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|years?|yrs?|y)?$/i.exec(

Original file line number	Diff line number	Diff line change
`@@ -46,7 +46,7 @@ module.exports = function(val, options) {`
`46`	`46`
`47`	`47`	`function parse(str) {`
`48`	`48`	`str = String(str);`
`49`		`- if (str.length > 10000) {`
	`49`	`+ if (str.length > 100) {`
`50`	`50`	`return;`
`51`	`51`	`}`
`52`	`52`	`var match = /^((?:\d+)?\.?\d+) *(milliseconds?\|msecs?\|ms\|seconds?\|secs?\|s\|minutes?\|mins?\|m\|hours?\|hrs?\|h\|days?\|d\|years?\|yrs?\|y)?$/i.exec(`