mirror of
https://github.com/github/codeql.git
synced 2026-04-18 21:44:02 +02:00
Rust: Update regex injection description
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
This commit is contained in:
committed by
GitHub
parent
b48fd99913
commit
1e0b78ebd3
@@ -42,7 +42,7 @@ unexpectedly cause strings such as <code>"key=secret"</code> to match.
|
||||
</p>
|
||||
<p>
|
||||
If user input is used to construct a regular expression, it should be escaped
|
||||
first. This ensures that the malicious users cannot insert characters that have special
|
||||
first. This ensures that malicious users cannot insert characters that have special
|
||||
meanings in regular expressions.
|
||||
</p>
|
||||
<sample src="RegexInjectionGood.rs" />
|
||||
|
||||
Reference in New Issue
Block a user