hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Swift: # -> //

Browse Source
This commit is contained in:
Geoffrey White
2023-07-17 09:12:01 +01:00
parent 2870bc2ee0
commit 4644b7184b
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
swift/ql/src/queries/Security/CWE-730/RegexInjectionBad.swift
View File

@@ -1,10 +1,10 @@
func processRemoteInput(remoteInput: String) {
...
# BAD: Unsanitized user input is used to construct a regular expression
// BAD: Unsanitized user input is used to construct a regular expression
let regex1 = try Regex(remoteInput)
# BAD: Unsanitized user input is used to construct a regular expression
// BAD: Unsanitized user input is used to construct a regular expression
let regexStr = "abc|\(remoteInput)"
let regex2 = try NSRegularExpression(pattern: regexStr)

4
swift/ql/src/queries/Security/CWE-730/RegexInjectionGood.swift
View File

@@ -1,10 +1,10 @@
func processRemoteInput(remoteInput: String) {
...
# GOOD: Regular expression is not derived from user input
// GOOD: Regular expression is not derived from user input
let regex1 = try Regex(myRegex)
# GOOD: User input is sanitized before being used to construct a regular expression
// GOOD: User input is sanitized before being used to construct a regular expression
let escapedInput = NSRegularExpression.escapedPattern(for: remoteInput)
let regexStr = "abc|\(escapedInput)"
let regex2 = try NSRegularExpression(pattern: regexStr)