hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add tests for py/polynomial-redos

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-07-15 14:15:44 +02:00
parent 1be0dc0876
commit 76caf43b54
3 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
python/ql/test/query-tests/Security/CWE-730-PolynomialReDoS/PolynomialReDoS.expected Normal file
View File

@@ -0,0 +1,3 @@
edges
nodes
#select

1
python/ql/test/query-tests/Security/CWE-730-PolynomialReDoS/PolynomialReDoS.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE-730/PolynomialReDoS.ql

9
python/ql/test/query-tests/Security/CWE-730-PolynomialReDoS/test.py Normal file
View File

@@ -0,0 +1,9 @@
import re
from flask import Flask, request
app = Flask(__name__)
@app.route("/poly-redos")
def code_execution():
text = request.args.get("text")
re.sub(r"^\s+|\s+$", "", text) # NOT OK
re.match(r"^0\.\d+E?\d+$", text) # NOT OK