Be defensive about another potential regex blowup

crosshare-org · Mar 29, 2024 · cf01477 · cf01477
1 parent 392a7fc
commit cf01477
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/lib/viewableGrid.ts b/app/lib/viewableGrid.ts
@@ -671,7 +671,7 @@ export function getRefs(grid: CluedGrid): [Set<number>[], RefPosition[][]] {
     const refPos: RefPosition[] = [];
     let match;
     const re =
-      /(?<numSection>(,? ?(and)? ?\b\d+-? ?)+)(?<dir>a(cross(es)?)?|d(owns?)?)\b/gi;
+      /(?=(?<numSection>(,? ?(and)? ?\b\d+-? ?)+))\k<numSection>(?<dir>a(cross(es)?)?|d(owns?)?)\b/gi;
     while (!e.clue.startsWith('!@') && (match = re.exec(e.clue)) !== null) {
       const dirString = match.groups?.dir?.toLowerCase();
       if (!dirString) {