Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 10 commits
- 20 files changed
- 1 contributor
Commits on Jul 26, 2021
Commits on Aug 3, 2021
-
Avoid an unlikely but theoretically possible redos
When stripping the trailing slash from `files` arguments, we were using `f.replace(/\/+$/, '')`, which can get exponentially slow when `f` contains many `/` characters. Tested a few variants and found one that's faster than the regexp replacement for short strings, long strings, and long strings containing many instances of repeated `/` characters. This is "unlikely but theoretically possible" because it requires that the user is passing untrusted input into the `tar.extract()` or `tar.list()` array of entries to parse/extract, which would be quite unusual.
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v6.1.0...v6.1.4