hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

use RegExpTreeView insteaed of RegexTreeView in JS

Browse Source
This commit is contained in:
erik-krogh
2022-11-22 12:47:21 +01:00
parent f9b775e4b8
commit 6b5cd9abc3
14 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/security/BadTagFilterQuery.qll
View File

@@ -2,7 +2,7 @@
* Provides predicates for reasoning about bad tag filter vulnerabilities.
*/
private import regexp.RegexTreeView::RegexTreeView as TreeView
private import regexp.RegExpTreeView::RegExpTreeView as TreeView
// BadTagFilterQuery should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.nfa.BadTagFilterQuery::Make<TreeView> as Dep
import Dep

2
javascript/ql/lib/semmle/javascript/security/IncompleteMultiCharacterSanitizationSpecific.qll
View File

@@ -3,7 +3,7 @@
*/
import javascript
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.nfa.NfaUtils::Make<TreeView> as NfaUtils
class StringSubstitutionCall = StringReplaceCall;

2
javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll
View File

@@ -2,7 +2,7 @@
* Classes and predicates for working with suspicious character ranges.
*/
private import regexp.RegexTreeView::RegexTreeView as TreeView
private import regexp.RegExpTreeView::RegExpTreeView as TreeView
// OverlyLargeRangeQuery should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.OverlyLargeRangeQuery::Make<TreeView> as Dep
import Dep

2
javascript/ql/lib/semmle/javascript/security/regexp/ExponentialBackTracking.qll
View File

@@ -62,7 +62,7 @@
* a suffix `x` (possible empty) that is most likely __not__ accepted.
*/
private import RegexTreeView::RegexTreeView as TreeView
private import RegExpTreeView::RegExpTreeView as TreeView
// ExponentialBackTracking should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.nfa.ExponentialBackTracking::Make<TreeView> as Dep
import Dep

2
javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
View File

@@ -7,7 +7,7 @@
* other queries that benefit from reasoning about NFAs.
*/
private import RegexTreeView::RegexTreeView as TreeView
private import RegExpTreeView::RegExpTreeView as TreeView
// NfaUtils should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.nfa.NfaUtils::Make<TreeView> as Dep
import Dep

2
javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSCustomizations.qll
View File

@@ -5,7 +5,7 @@
*/
import javascript
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
/** Module containing sources, sinks, and sanitizers for polynomial regular expression denial-of-service attacks. */
module PolynomialReDoS {

2
javascript/ql/lib/semmle/javascript/security/regexp/RegexTreeView.qll → javascript/ql/lib/semmle/javascript/security/regexp/RegExpTreeView.qll
View File

@@ -6,7 +6,7 @@ private import codeql.regex.nfa.NfaUtils as NfaUtils
private import codeql.regex.RegexTreeView
/** An implementation that parses a regular expression into a tree of `RegExpTerm`s. */
module RegexTreeView implements RegexTreeViewSig {
module RegExpTreeView implements RegexTreeViewSig {
import javascript
class Top = Locatable;

2
javascript/ql/lib/semmle/javascript/security/regexp/RegexpMatching.qll
View File

@@ -3,7 +3,7 @@
* and for testing which capture groups are filled when a particular regexp matches a string.
*/
private import RegexTreeView::RegexTreeView as TreeView
private import RegExpTreeView::RegExpTreeView as TreeView
// RegexpMatching should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.nfa.RegexpMatching::Make<TreeView> as Dep
import Dep

2
javascript/ql/lib/semmle/javascript/security/regexp/SuperlinearBackTracking.qll
View File

@@ -35,7 +35,7 @@
* It also doesn't find all transitions in the product automaton, which can cause false negatives.
*/
private import RegexTreeView::RegexTreeView as TreeView
private import RegExpTreeView::RegExpTreeView as TreeView
// SuperlinearBackTracking should be used directly from the shared pack, and not from this file.
deprecated private import codeql.regex.nfa.SuperlinearBackTracking::Make<TreeView> as Dep
import Dep

2
javascript/ql/src/Performance/ReDoS.ql
View File

@@ -15,7 +15,7 @@
*/
import javascript
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.nfa.ExponentialBackTracking::Make<TreeView>
from RegExpTerm t, string pump, State s, string prefixMsg

2
javascript/ql/src/Security/CWE-020/OverlyLargeRange.ql
View File

@@ -12,7 +12,7 @@
* external/cwe/cwe-020
*/
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.OverlyLargeRangeQuery::Make<TreeView>
from TreeView::RegExpCharacterRange range, string reason

2
javascript/ql/src/Security/CWE-116/BadTagFilter.ql
View File

@@ -16,7 +16,7 @@
* external/cwe/cwe-186
*/
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.nfa.BadTagFilterQuery::Make<TreeView>
from HtmlMatchingRegExp regexp, string msg

2
javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql
View File

@@ -20,7 +20,7 @@ string toOtherCase(string s) {
if s.regexpMatch(".*[a-z].*") then result = s.toUpperCase() else result = s.toLowerCase()
}
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.nfa.NfaUtils::Make<TreeView> as NfaUtils
/** Holds if `s` is a relevant regexp term were we want to compute a string that matches the term (for `getCaseSensitiveBypassExample`). */

2
javascript/ql/test/query-tests/Security/CWE-400/ReDoS/PolynomialBackTracking.ql
View File

@@ -1,4 +1,4 @@
private import semmle.javascript.security.regexp.RegexTreeView::RegexTreeView as TreeView
private import semmle.javascript.security.regexp.RegExpTreeView::RegExpTreeView as TreeView
import codeql.regex.nfa.SuperlinearBackTracking::Make<TreeView>
from PolynomialBackTrackingTerm t