b2700903ae
As deepmap/oapi-codegen didn't work with this newer version, upgrade to oapi-codegen/oapi-codegen v2. Mitigating CVE-2025-30153
35 lines
894 B
Go
35 lines
894 B
Go
package openapi3
|
|
|
|
import (
|
|
"fmt"
|
|
"regexp"
|
|
)
|
|
|
|
var patRewriteCodepoints = regexp.MustCompile(`(?P<replaced_with_slash_x>\\u)(?P<code>[0-9A-F]{4})`)
|
|
|
|
// See https://pkg.go.dev/regexp/syntax
|
|
func intoGoRegexp(re string) string {
|
|
return patRewriteCodepoints.ReplaceAllString(re, `\x{${code}}`)
|
|
}
|
|
|
|
// NOTE: racey WRT [writes to schema.Pattern] vs [reads schema.Pattern then writes to compiledPatterns]
|
|
func (schema *Schema) compilePattern(c RegexCompilerFunc) (cp RegexMatcher, err error) {
|
|
pattern := schema.Pattern
|
|
if c != nil {
|
|
cp, err = c(pattern)
|
|
} else {
|
|
cp, err = regexp.Compile(intoGoRegexp(pattern))
|
|
}
|
|
if err != nil {
|
|
err = &SchemaError{
|
|
Schema: schema,
|
|
SchemaField: "pattern",
|
|
Origin: err,
|
|
Reason: fmt.Sprintf("cannot compile pattern %q: %v", pattern, err),
|
|
}
|
|
return
|
|
}
|
|
|
|
var _ bool = compiledPatterns.CompareAndSwap(pattern, nil, cp)
|
|
return
|
|
}
|