From 9dfa5fc675bb7ab4a4feeff1cca191324fee480a Mon Sep 17 00:00:00 2001 From: Faisal Salman Date: Tue, 24 Nov 2020 15:49:34 +0700 Subject: [PATCH] Fix #453 - ReDoS vulnerability in MachSpeed tablets detection as reported by @migueldemoura --- src/ua-parser.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ua-parser.js b/src/ua-parser.js index 07ecc5e..26ba60a 100755 --- a/src/ua-parser.js +++ b/src/ua-parser.js @@ -650,7 +650,7 @@ /android.+[;\/]\s*(Le[\s\-]+Pan)[\s\-]+(\w{1,9})\s+build/i // Le Pan Tablets ], [VENDOR, MODEL, [TYPE, TABLET]], [ - /android.+[;\/]\s*(Trio[\s\-]*.*)\s+build/i // MachSpeed Tablets + /android.+[;\/]\s*(Trio[\s\w\-\.]+)\s+build/i // MachSpeed Tablets ], [MODEL, [VENDOR, 'MachSpeed'], [TYPE, TABLET]], [ /android.+[;\/]\s*(Trinity)[\-\s]*(T\d{3})\s+build/i // Trinity Tablets