diff options
| author | Joshua Peek <josh@joshpeek.com> | 2009-04-28 11:43:22 -0500 |
|---|---|---|
| committer | Joshua Peek <josh@joshpeek.com> | 2009-04-28 11:43:22 -0500 |
| commit | 40eba67d30a660f748692bcfe7fcb758a2c8357a (patch) | |
| tree | 9d6bbe72ae9e2ce600ec6cc5711311305dedd89c | |
| parent | 702d2ab905c21e8a1ce6ca38cc31a91b5328bf46 (diff) | |
| download | rack-40eba67d30a660f748692bcfe7fcb758a2c8357a.tar.gz | |
Add anchor to nested params parsing regexp to prevent stack overflows
| -rw-r--r-- | lib/rack/utils.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/rack/utils.rb b/lib/rack/utils.rb index 631a38f5..1538acf0 100644 --- a/lib/rack/utils.rb +++ b/lib/rack/utils.rb @@ -63,7 +63,7 @@ module Rack module_function :parse_nested_query def normalize_params(params, name, v = nil) - name =~ %r([\[\]]*([^\[\]]+)\]*) + name =~ %r(\A[\[\]]*([^\[\]]+)\]*) k = $1 || '' after = $' || '' |