hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 13:15:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

make ReDoSPruning into a parameterized module

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-02-14 13:26:08 +01:00
parent dc06e9df02
commit 3be4a86acd
16 changed files with 296 additions and 328 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Performance/ReDoS.ql
View File

@@ -19,7 +19,7 @@ import semmle.javascript.security.performance.ReDoSUtil
import semmle.javascript.security.performance.ExponentialBackTracking
from RegExpTerm t, string pump, State s, string prefixMsg
where ReDoSPruning::hasReDoSResult(t, pump, s, prefixMsg)
where hasReDoSResult(t, pump, s, prefixMsg)
select t,
"This part of the regular expression may cause exponential backtracking on strings " + prefixMsg +
"containing many repetitions of '" + pump + "'."