svn commit: r1932548 - pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser

[msahyoun]

Author: msahyoun
Date: Wed Mar 25 15:42:28 2026
New Revision: 1932548

Log:
PDFBOX-5660: optimize/remove regex, 2nd attempt for Sonar

Modified:
   
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFStreamParser.java

Modified: 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFStreamParser.java
==============================================================================
--- 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFStreamParser.java
  Wed Mar 25 15:22:00 2026        (r1932547)
+++ 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFStreamParser.java
  Wed Mar 25 15:42:28 2026        (r1932548)
@@ -47,7 +47,9 @@ public class PDFStreamParser extends COS
      */
     private static final Logger LOG = 
LogManager.getLogger(PDFStreamParser.class);
 
-    private static final Pattern NUMBER_PATTERN = 
Pattern.compile("^(?>\\d*)\\.?(?>\\d*)$");
+    // Pattern to match numbers (integers or decimals). Safe from ReDoS: no 
overlapping quantifiers
+    // or character classes that cause backtracking. The optional decimal 
group is explicit and bounded.
+    private static final Pattern NUMBER_PATTERN = 
Pattern.compile("^\\d*(\\.\\d*)?$");
     private static final int MAX_BIN_CHAR_TEST_LENGTH = 10;
     private final byte[] binCharTestArr = new byte[MAX_BIN_CHAR_TEST_LENGTH];
     private int inlineImageDepth = 0;