code security updates

metanorma · Aug 22, 2024 · b75770a · b75770a
1 parent f9bf84f
commit b75770a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/html2doc/mime.rb b/lib/html2doc/mime.rb
@@ -67,10 +67,10 @@ def mime_package(result, filename, dir)
   end
 
   def contentid(mhtml)
-    mhtml.gsub %r{(<img[^>]*?src=")([^"'<]+)(['"])}m do |m|
+    mhtml.gsub %r{(<img[^<>]*?src=")([^"'<]+)(['"])}m do |m|
       repl = "#{$1}cid:#{File.basename($2)}#{$3}"
       /^data:|^https?:/ =~ $2 ? m : repl
-    end.gsub %r{(<v:imagedata[^>]*?src=")([^"'<]+)(['"])}m do |m|
+    end.gsub %r{(<v:imagedata[^<>]*?src=")([^"'<]+)(['"])}m do |m|
       repl = "#{$1}cid:#{File.basename($2)}#{$3}"
       /^data:|^https?:/ =~ $2 ? m : repl
     end