fix:ReDoS fix about pull/5971 and issues/6031

[mmmsssttt404]

Q	A
Bug fix?	yes
New feature?	no
BC breaks?	no
Deprecations?	no
Tests pass?	yes
Fixed tickets	#1234, #5678
License	MIT
Doc PR	#5971

#5971
#6031
Sorry for the impact on you, this was caused by an extra space,We modified it and made it more consistent with the original regex
Regex Change to

(?<![\w\-])([\w\-]+\="[^"]*")|(?<![\w\-])([\w\-]+\='[^']*')|"([^"]*)"|'([^']*)'|\s

https://github.com/mmmsssttt404/pm2/blob/1e0e96c5257041bc19b1fd796ea455c4085bec6e/lib/tools/Config.js#L203-L205

I'm deeply sorry for the errors I introduced in the code changes. My original intention was to fix Redos, but it caused a bug. In the future, I will be more cautious and fully verify before making any changes.

[mmmsssttt404]

[mmmsssttt404]

I add one test in https://github.com/mmmsssttt404/pm2/blob/master/test/programmatic/json_validation.mocha.js to test https://github.com//issues/6031 this problem

[Unitech]

Thanks for catching this and proposing a fix. The vulnerable value.split(/([\w\-]+\="[^"]*")…/) in lib/tools/Config.js was rewritten in pm2 7.0.0 to a linear match(/[^\s"'=]+="[^"]*"|…/g) (no catastrophic backtracking). Closing as resolved by 7.0.0 — appreciate the report!