{"action":"created","issue":{"url":"https://api.github.com/repos/pouchdb/pouchdb/issues/7115","repository_url":"https://api.github.com/repos/pouchdb/pouchdb","labels_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/7115/labels{/name}","comments_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/7115/comments","events_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/7115/events","html_url":"https://github.com/pouchdb/pouchdb/pull/7115","id":300418040,"number":7115,"title":"remove catastrophic backtracking vulnerability","user":{"login":"davisjam","id":22822319,"avatar_url":"https://avatars0.githubusercontent.com/u/22822319?v=4","gravatar_id":"","url":"https://api.github.com/users/davisjam","html_url":"https://github.com/davisjam","followers_url":"https://api.github.com/users/davisjam/followers","following_url":"https://api.github.com/users/davisjam/following{/other_user}","gists_url":"https://api.github.com/users/davisjam/gists{/gist_id}","starred_url":"https://api.github.com/users/davisjam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davisjam/subscriptions","organizations_url":"https://api.github.com/users/davisjam/orgs","repos_url":"https://api.github.com/users/davisjam/repos","events_url":"https://api.github.com/users/davisjam/events{/privacy}","received_events_url":"https://api.github.com/users/davisjam/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-02-26T22:18:36Z","updated_at":"2018-03-04T12:41:43Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/pouchdb/pouchdb/pulls/7115","html_url":"https://github.com/pouchdb/pouchdb/pull/7115","diff_url":"https://github.com/pouchdb/pouchdb/pull/7115.diff","patch_url":"https://github.com/pouchdb/pouchdb/pull/7115.patch"},"body":"Problem:\r\nA regex to parse function names was vulnerable to catastrophic\r\nbacktracking.\r\n\r\nSolution:\r\nAlter the regex to make it safe.\r\nThe new regex matches almost the same language.\r\nThe only differences should not be a problem in the input space.\r\n\r\nThis regex is not exploitable for REDOS as currently used.\r\nThis change is for future-proofing."},"comment":{"url":"https://api.github.com/repos/pouchdb/pouchdb/issues/comments/370226222","html_url":"https://github.com/pouchdb/pouchdb/pull/7115#issuecomment-370226222","issue_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/7115","id":370226222,"user":{"login":"daleharvey","id":37787,"avatar_url":"https://avatars1.githubusercontent.com/u/37787?v=4","gravatar_id":"","url":"https://api.github.com/users/daleharvey","html_url":"https://github.com/daleharvey","followers_url":"https://api.github.com/users/daleharvey/followers","following_url":"https://api.github.com/users/daleharvey/following{/other_user}","gists_url":"https://api.github.com/users/daleharvey/gists{/gist_id}","starred_url":"https://api.github.com/users/daleharvey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daleharvey/subscriptions","organizations_url":"https://api.github.com/users/daleharvey/orgs","repos_url":"https://api.github.com/users/daleharvey/repos","events_url":"https://api.github.com/users/daleharvey/events{/privacy}","received_events_url":"https://api.github.com/users/daleharvey/received_events","type":"User","site_admin":false},"created_at":"2018-03-04T12:41:43Z","updated_at":"2018-03-04T12:41:43Z","author_association":"OWNER","body":"We dont have unit tests for all functions and most of the time depend on the integration tests to ensureall is good which they are here so happy to merge, thanks so much :)"}}
{"actor":{"display_login":"daleharvey"}}