ruby-sdk/lib
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Koichi ITO 248b4d2dad Fix ReDoS vulnerability in StringUtils#underscore
## Summary

Replace regex patterns with lookahead/lookbehind assertions to prevent
catastrophic backtracking on Ruby 3.1 and earlier.

This issue only affects Ruby 3.1 and earlier. Since it does not occur on Ruby 3.2+,
it is not an issue in the current stable release (0.4.0), which does not include #206.

## Regression Testing

Ensure the regex patterns complete within 1 second for a 50,000-character input
that would otherwise trigger superlinear backtracking.
2026-01-09 01:14:52 +09:00
..
mcp Fix ReDoS vulnerability in StringUtils#underscore 2026-01-09 01:14:52 +09:00
json_rpc_handler.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
mcp.rb Support icons parameter 2025-12-30 05:35:22 +09:00