hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

trim the whitespace in the poly-redos examples

Browse Source
This commit is contained in:
erik-krogh
2023-05-15 14:45:57 +02:00
parent d989359656
commit 83ca1495e0
4 changed files with 27 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.qhelp
View File

@@ -15,8 +15,7 @@
</p>
<sample language="java">
Pattern.compile("^\\s+|\\s+$").matcher(text).replaceAll("") // BAD
</sample>
Pattern.compile("^\\s+|\\s+$").matcher(text).replaceAll("") // BAD</sample>
<p>
@@ -71,8 +70,7 @@
</p>
<sample language="java">
"^0\\.\\d+E?\\d+$""
</sample>
"^0\\.\\d+E?\\d+$"" </sample>
<p>
@@ -113,8 +111,7 @@
</p>
<sample language="java">
Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str);
</sample>
Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str); </sample>
<p>
It's not immediately obvious how to rewrite this regular expression
@@ -124,12 +121,11 @@
</p>
<sample language="java">
if (str.length() &gt; 1000) {
throw new IllegalArgumentException("Input too long");
}
if (str.length() &gt; 1000) {
throw new IllegalArgumentException("Input too long");
}
Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str);
</sample>
Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str); </sample>
</example>
<include src="ReDoSReferences.inc.qhelp"/>