LibWeb: Use a more restrictive regex for method token production

This changes the regular expression for is_method() to a more restrictive pattern.
luteresa · Apr 23, 2022 · fccea88 · fccea88
1 parent 053bcd4
commit fccea88
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Userland/Libraries/LibWeb/XHR/XMLHttpRequest.cpp b/Userland/Libraries/LibWeb/XHR/XMLHttpRequest.cpp
@@ -390,8 +390,8 @@ static bool is_forbidden_method(String const& method)
 // https://fetch.spec.whatwg.org/#concept-method
 static bool is_method(String const& method)
 {
- Regex<ECMA262Parser> regex { R"~~~(^.*["(),\/:;<=>?@\\[\]{}]+.*$)~~~" };
- return !regex.has_match(method);
+ Regex<ECMA262Parser> regex { R"~~~(^[A-Za-z0-9!#$%&'*+-.^_`|~]+$)~~~" };
+ return regex.has_match(method);
 }
 
 // https://fetch.spec.whatwg.org/#concept-method-normalize