Work around ReDoS vulnerability

railsadminteam · Mar 4, 2022 · d073c4d · d073c4d
1 parent 44ea196
commit d073c4d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/generators/rails_admin/importmap_formatter.rb b/lib/generators/rails_admin/importmap_formatter.rb
@@ -18,7 +18,7 @@ def format
 
       # Tidy up jQuery UI dependencies
       jquery_uis = imports.keys.filter { |key, _| key =~ /jquery-ui/ }
-      imports['jquery-ui/'] = imports[jquery_uis.first].gsub(%r{(/[^@]+)+$}, '/')
+      imports['jquery-ui/'] = imports[jquery_uis.first].gsub(%r{(@[^/@]+)/[^@]+$}, '\1/')
       imports.reject! { |key, _| jquery_uis.include? key }
 
       pins = ['pin "rails_admin", preload: true', packager.pin_for('rails_admin/src/rails_admin/base', imports.delete('rails_admin'))]