Marc-André Bombeck dd46bbbd60 Make the spacing-scale modifier-chain regexes linear ...

Both class-string regexes carried (?:[^\s"']*:)* for the optional
modifier prefix chain. The inner class includes the colon, so the star
could carve the same prefix into chunks many ways, and a long
non-matching string made the engine try them all — exponential
backtracking (CodeQL alert 44, js/redos). Excluding the colon from the
chunk class accepts exactly the same strings with one parse each. The
rule's 35 tests pass unchanged.

Resolves CodeQL alert 44.

2026-08-29 19:20:58 +02:00

..

healthlog

Make the spacing-scale modifier-chain regexes linear

2026-08-29 19:20:58 +02:00