linter

Author: xansec

dojo/tools/mayhem/parser.py

@@ -214,19 +214,20 @@ def clean_mayhem_title_text(text):
     if not text:
         return ""
 
-    # Remove links
-    link_regex = r"\[([^\]]+)\]\(([^)]+)\)"
+    # Remove links (and add limit to avoid catastrophic backtracking)
+    link_regex = r"\[[^\]]{1,100}?\]\([^)]{1,200}?\)"
     text = re.sub(link_regex, "", text)
 
     # Remove URL encoded characters
     url_encoding_regex = r"&#x\d+;"
     text = re.sub(url_encoding_regex, "", text)
 
     # Remove single or double quotes
-    text = text.replace('"', "").replace("'", "")
+    quotes_regex = r"[\"']"
+    text = re.sub(quotes_regex, "", text)
 
     # Remove TDID
-    tdid_regex = r"TDID-\d+\s-\s"
+    tdid_regex = r"TDID-\d+\s*-\s*|TDID-\d+-"
     text = re.sub(tdid_regex, "", text)
 
     return text.strip()