From 1d09d76cb2dd9dc09a943220e4ad96ad8d80904a Mon Sep 17 00:00:00 2001 From: Son Nguyen Kim Date: Tue, 21 Sep 2021 10:57:36 +0200 Subject: [PATCH] use re2 instead of re to avoid ReDOS attack --- app/alias_utils.py | 2 +- app/dashboard/views/domain_detail.py | 2 +- app/dashboard/views/referral.py | 2 +- app/email_utils.py | 2 +- app/spamassassin_utils.py | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/app/alias_utils.py b/app/alias_utils.py index 238cef67..04df5ff3 100644 --- a/app/alias_utils.py +++ b/app/alias_utils.py @@ -1,4 +1,4 @@ -import re +import re2 as re from typing import Optional from email_validator import validate_email, EmailNotValidError diff --git a/app/dashboard/views/domain_detail.py b/app/dashboard/views/domain_detail.py index 264cab51..8773a970 100644 --- a/app/dashboard/views/domain_detail.py +++ b/app/dashboard/views/domain_detail.py @@ -1,4 +1,4 @@ -import re +import re2 as re from threading import Thread from flask import render_template, request, redirect, url_for, flash diff --git a/app/dashboard/views/referral.py b/app/dashboard/views/referral.py index b1f3d837..a037cb02 100644 --- a/app/dashboard/views/referral.py +++ b/app/dashboard/views/referral.py @@ -1,4 +1,4 @@ -import re +import re2 as re from flask import render_template, request, flash, redirect, url_for from flask_login import login_required, current_user diff --git a/app/email_utils.py b/app/email_utils.py index 3c672fc8..c55667d9 100644 --- a/app/email_utils.py +++ b/app/email_utils.py @@ -4,7 +4,7 @@ import enum import os import quopri import random -import re +import re2 as re import time import uuid from copy import deepcopy diff --git a/app/spamassassin_utils.py b/app/spamassassin_utils.py index 05fb2739..f62a4979 100644 --- a/app/spamassassin_utils.py +++ b/app/spamassassin_utils.py @@ -2,7 +2,7 @@ https://github.com/petermat/spamassassin_client """ import logging -import re +import re2 as re import select import socket from io import BytesIO