From a6d43215132fe4f3d93f8d7e90ba83b16a0838b2 Mon Sep 17 00:00:00 2001
From: Hsiaoming Yang
Date: Mon, 27 Jun 2022 18:00:29 +0900
Subject: [PATCH] Fix asteris emphasis regex CVE-2022-34749
---
mistune/inline_parser.py | 4 ++--
tests/fixtures/non-commonmark.txt | 14 --------------
2 files changed, 2 insertions(+), 16 deletions(-)
diff --git a/mistune/inline_parser.py b/mistune/inline_parser.py
index 843d3f7..07320e5 100644
--- a/mistune/inline_parser.py
+++ b/mistune/inline_parser.py
@@ -64,8 +64,8 @@ class InlineParser(ScannerParser):
#: _emphasis_ __strong__
ASTERISK_EMPHASIS = (
r'(\*{1,2})(?=[^\s*])('
- r'(?:\\[\\*]|[^*])*'
- r'(?:' + ESCAPE_TEXT + r'|[^\s*]))\1'
+ r'(?:(?:(?[link [foo [bar]]](/uri)
````````````````````````````````
-```````````````````````````````` example
-[link *foo **bar** `#`*](/uri)
-.
-link *foo bar #
*
-````````````````````````````````
-
```````````````````````````````` example
[foo [bar](/uri)](/uri)
.
@@ -48,14 +42,6 @@
foo<http://example.com/?search=>
````````````````````````````````
-```````````````````````````````` example
-[link *foo **bar** `#`*][ref]
-
-[ref]: /uri
-.
-link *foo bar #
*
-````````````````````````````````
-
```````````````````````````````` example
[foo [bar](/uri)][ref]