| शीर्षक | uBlock @gorhill/ubo-core >=npm_0.1.11 Inefficient Regular Expression Complexity |
|---|
| विवरण | A potential Regular Expression Denial of Service (ReDoS)vulnerability in the 1p-filters.js script of uBlock Origin. The vulnerabilityoccurs due to the use of the regular expression /\s+$/, which is used to removetrailing whitespace. This issue can lead to a denial of service when processingstrings with a large number of trailing spaces, potentially causing a browser tofreeze.
The regular expression /\s+$/ is applied to remove trailing whitespace in user‑provided content. However, when the content has a large number of spaces(e.g., ~100,000), this pattern causes excessive backtracking in the regularexpression engine, resulting in performance degradation and UI freezing. This is a classic ReDoS attack vector. |
|---|
| स्रोत | ⚠️ https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c |
|---|
| उपयोगकर्ता | DayShift (UID 80963) |
|---|
| सबमिशन | 19/04/2025 10:04 AM (1 वर्ष पहले) |
|---|
| संयम | 02/05/2025 02:53 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 307194 [gorhill uBlock Origin तक 1.63.3b16 UI src/js/1p-filters.js currentStateChanged सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|