Fast vhost#77

Draft

sheplu wants to merge 4 commits into

GitHub Advanced Security / CodeQL failed Jun 13, 2026 in 5s

7 new alerts including 7 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

7 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 17 in bench/index.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.

Check failure on line 243 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.

Check failure on line 265 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.

Check failure on line 276 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.

Check failure on line 315 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'b.com', so it might match more hosts than expected.

Check failure on line 392 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.

Check failure on line 439 in test/test.mjs

Code scanning / CodeQL

Incomplete regular expression for hostnames High test

This string, which is used as a regular expression

, has an unescaped '.' before 'example.com', so it might match more hosts than expected.