Waleed 0e6ada4bdb fix(security): resolve ReDoS vulnerability in function execute tag pattern (#4149) ...

* fix(security): resolve ReDoS vulnerability in function execute tag pattern

Simplified regex to eliminate overlapping quantifiers that caused exponential
backtracking on malformed input without closing delimiter.

* fix(security): exclude trailing-dot refs and hoist tag pattern to module level

* fix(security): align tag pattern with codebase standard [^<>]+ pattern

Matches createReferencePattern() from reference-validation.ts used by the
core executor. Invalid refs handled gracefully by resolveBlockReference.

* refactor(security): use createReferencePattern() instead of inline regex

2026-04-13 20:34:25 -07:00

..

docs

improvement(docs): remove references to concurrency control (#4147)

2026-04-13 19:17:11 -07:00

sim

fix(security): resolve ReDoS vulnerability in function execute tag pattern (#4149)

2026-04-13 20:34:25 -07:00