From 47b0d0649333ddddf8609398a69cacce9466af3f Mon Sep 17 00:00:00 2001 From: Zaid Abdulla Date: Mon, 14 Jul 2014 12:09:58 +0300 Subject: [PATCH] Crediting Netanel Rubin for his find. --- lib/normalize.coffee | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/normalize.coffee b/lib/normalize.coffee index 1f0bc36..290a4b4 100644 --- a/lib/normalize.coffee +++ b/lib/normalize.coffee @@ -20,6 +20,9 @@ # THE SOFTWARE. ### +# Credit to Netanel Rubin from Check Point Software Technologies for discovering +# vulnerability caused by use of eval to generate regex from user input. + common = require './common' parameters = require './parameters'