hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 11:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

trim the whitespace in the poly-redos examples

Browse Source
This commit is contained in:
erik-krogh
2023-05-15 14:45:57 +02:00
parent d989359656
commit 83ca1495e0
4 changed files with 27 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
python/ql/src/Security/CWE-730/PolynomialReDoS.qhelp
View File

@@ -15,8 +15,7 @@
</p>
<sample language="python">
re.sub(r"^\s+|\s+$", "", text) # BAD
</sample>
re.sub(r"^\s+|\s+$", "", text) # BAD</sample>
<p>
@@ -71,8 +70,7 @@
</p>
<sample language="python">
^0\.\d+E?\d+$ # BAD
</sample>
^0\.\d+E?\d+$ # BAD</sample>
<p>
@@ -113,8 +111,7 @@
</p>
<sample language="python">
match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str)
</sample>
match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) </sample>
<p>
It's not immediately obvious how to rewrite this regular expression
@@ -124,11 +121,10 @@
</p>
<sample language="python">
if len(str) &gt; 1000:
raise ValueError("Input too long")
if len(str) &gt; 1000:
raise ValueError("Input too long")
match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str)
</sample>
match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) </sample>
</example>
<include src="ReDoSReferences.inc.qhelp"/>