IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

AzureMonitor: Exclude ( in second capturing group for CodeQL ReDoS vulnerability (#43494)

Browse Source
This commit is contained in:
Shirley 2021-12-23 15:10:35 +01:00 committed by GitHub
parent b87c737a14
commit 3326c3ab7b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
public/app/plugins/datasource/grafana-azure-monitor-datasource/log_analytics/querystring_builder.ts
View File

@ -5,7 +5,7 @@ export default class LogAnalyticsQuerystringBuilder {
generate() { generate() {
let queryString = this.rawQueryString; let queryString = this.rawQueryString;
const macroRegexp = /\$__([_a-zA-Z0-9]+)\(([^\)]*)\)/gi; const macroRegexp = /\$__([_a-zA-Z0-9]+)\(([^()]*)\)/gi;
queryString = queryString.replace(macroRegexp, (match, p1, p2) => { queryString = queryString.replace(macroRegexp, (match, p1, p2) => {
if (p1 === 'contains') { if (p1 === 'contains') {
return this.getMultiContains(p2); return this.getMultiContains(p2);