Fix ReDoS in /workspaces/material-ui/packages/markdown/parseMarkdown.js

packages/markdown/parseMarkdown.js

@@ -209,7 +209,7 @@ function getCodeblock(content) {
   if (!content.startsWith('<codeblock')) {
     return undefined;
   }
-  const storageKey = content.match(/^<codeblock [^>]*storageKey=["|'](\S*)["|'].*>/m)?.[1];
+  const storageKey = content.match(/^<codeblock (?!<codeblock )[^>]*storageKey=["|'](?!storageKey=["|'])(\S*)["|'].*>/m)?.[1];
   const blocks = [...content.matchAll(/^```(\S*) (\S*)\n(.*?)\n```/gmsu)].map(
     ([, language, tab, code]) => ({ language, tab, code }),
   );

packages/markdown/parseMarkdown.test.js

@@ -241,6 +241,20 @@ authors:
         ],
       });
     });
+
+
+    var str = "<codeblock  ";
+    for (var i = 0; i < 100000; i++) {
+      str += "storageKey='";
+    }
+    str += "@";
+    it('should complete within 10 seconds', async function () {
+      const start = Date.now();
+      getCodeblock(str);
+      const end = Date.now();
+      const duration = (end - start) / 1000; // turn to seconds
+      expect(duration).to.be.lessThan(10);
+    });
   });
 
   describe('renderMarkdown', () => {