fix(@angular-devkit/build-angular): limit error message length to are…

… passed to RegExp.

Webpack errors can sometimes be several hundred of thousands of characters long as it may contain the entire bundle. This can cause a ReDoS, this change limits the message that is passed to the RegExp to 2000 characters.

Closes angular#24771

packages/angular_devkit/build_angular/src/webpack/utils/stats.ts

@@ -414,7 +414,7 @@ export function statsErrorsToString(
       // See: https://github.com/webpack/webpack/issues/15980
       const message = statsConfig.errorStack
         ? error.message
-        : /[\s\S]+?(?=\n+\s+at\s)/.exec(error.message)?.[0] ?? error.message;
+        : /[\s\S]+?(?=\n+\s+at\s)/.exec(error.message.substring(0, 2000))?.[0] ?? error.message;
 
       if (!/^error/i.test(message)) {
         output += r('Error: ');