Add Regex timeout to prevent ReDoS attack

christiaanderidder · Aug 27, 2024 · 674deb7 · 674deb7
1 parent f181c82
commit 674deb7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/QuestPDF.Markdown/ParsedMarkdownDocument.cs b/src/QuestPDF.Markdown/ParsedMarkdownDocument.cs
@@ -17,7 +17,7 @@ public class ParsedMarkdownDocument
 {
     private readonly MarkdownDocument _document;
     private readonly ConcurrentDictionary<string, ImageWithDimensions> _imageCache = new();
-    private static readonly Regex DataUri = new(@"data:image\/.+?;base64,(?<data>.+)", RegexOptions.Compiled);
+    private static readonly Regex DataUri = new(@"data:image\/.+?;base64,(?<data>.+)", RegexOptions.Compiled, TimeSpan.FromMilliseconds(100));
 
     private static readonly HttpClient HttpClient = new();