fix: regex vulnerable to super-linear runtime

Automattic · Jan 10, 2024 · c320bd0 · c320bd0
1 parent 9c23bec
commit c320bd0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/lib/dev-environment/dev-environment-cli.ts b/src/lib/dev-environment/dev-environment-cli.ts
@@ -967,7 +967,7 @@ export function getEnvTrackingInfo( slug: string ): Record< string, unknown > {
 			result[ snakeCasedKey ] = value;
 		}
 
-		result.php = ( result.php as string ).replace( /.*:/, '' );
+		result.php = ( result.php as string ).replace( /^[^:]+:/, '' );
 
 		return result;
 	} catch ( err ) {