[CVE-2022-37260]/ReDos found in main.js

[secdevlpr26]

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.

The ReDoS vulnerability can be mitigated with several best practices described here:
https://snyk.io/blog/redos-and-catastrophic-backtracking/