Security fix for ReDoS (axios#3980)

ready-research · web-flow · commit 5b457116e31d · 2021-08-30T14:33:43.000+02:00
diff --git a/lib/utils.js b/lib/utils.js
@@ -185,7 +185,7 @@ function isURLSearchParams(val) {
  * @returns {String} The String freed of excess whitespace
  */
 function trim(str) {
-  return str.replace(/^\s*/, '').replace(/\s*$/, '');
+  return str.trim ? str.trim() : str.replace(/^\s+|\s+$/g, '');
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -185,7 +185,7 @@ function isURLSearchParams(val) {`
`185`	`185`	`* @returns {String} The String freed of excess whitespace`
`186`	`186`	`*/`
`187`	`187`	`function trim(str) {`
`188`		`- return str.replace(/^\s/, '').replace(/\s$/, '');`
	`188`	`+ return str.trim ? str.trim() : str.replace(/^\s+\|\s+$/g, '');`
`189`	`189`	`}`
`190`	`190`
`191`	`191`	`/**`