fix backtracking vulnerability in block.pedantic.html as in markedj…

…s#1083
zhenalexfan · Mar 8, 2018 · e20dd02 · e20dd02
1 parent 7a9eeaa
commit e20dd02
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/marked.js b/lib/marked.js
@@ -119,7 +119,7 @@ block.pedantic = merge({}, block.normal, {
   html: edit(
     '^ *(?:comment *(?:\\n|\\s*$)'
     + '|<(tag)[\\s\\S]+?</\\1> *(?:\\n{2,}|\\s*$)' // closed tag
-    + '|<tag(?:"[^"]*"|\'[^\']*\'|\\s[^\'"/>]*)*?/?> *(?:\\n{2,}|\\s*$))')
+    + '|<tag(?:"[^"]*"|\'[^\']*\'|\\s[^\'"/>\\s]*)*?/?> *(?:\\n{2,}|\\s*$))')
     .replace('comment', block._comment)
     .replace(/tag/g, '(?!(?:'
       + 'a|em|strong|small|s|cite|q|dfn|abbr|data|time|code|var|samp|kbd|sub'