From 082d6c44c437511c5d9ad40317bdcd0e3c4382bc Mon Sep 17 00:00:00 2001
From: x032205 <x032205@gmail.com>
Date: Sat, 31 May 2025 00:50:51 -0400
Subject: [PATCH] Vulnerable regex test

---
 .../src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts b/backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts
index f9096ac71..5a5af935d 100644
--- a/backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts
+++ b/backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts
@@ -23,7 +23,7 @@ const HCVaultSyncDestinationConfigSchema = z.object({
     .trim()
     .min(1, "Path required")
     .max(128)
-    .transform((val) => new RE2("^/+|/+$", "g").replace(val, "")) // removes leading/trailing slashes
+    .transform((val) => val.replace(/^\/+|\/+$/g, "")) // removes leading/trailing slashes
     .refine((val) => new RE2("^([a-zA-Z0-9._-]+/)*[a-zA-Z0-9._-]+$").test(val), {
       message:
         "Invalid Vault path format. Use alphanumerics, dots, dashes, underscores, and single slashes between segments."