hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Allow $ANYVERSION token in Go package names

Browse Source
This commit is contained in:
Chris Smowton
2023-03-27 16:02:58 +01:00
parent 477341dd3b
commit 8a06ca5a43
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
go/ql/lib/semmle/go/dataflow/ExternalFlow.qll
View File

@@ -206,7 +206,7 @@ module ModelValidation {
or
summaryModel(package, type, _, name, signature, ext, _, _, _, provenance) and pred = "summary"
|
not package.regexpMatch("[a-zA-Z0-9_\\./-]*") and
not package.replaceAll("$ANYVERSION", "").regexpMatch("[a-zA-Z0-9_\\./-]*") and
result = "Dubious package \"" + package + "\" in " + pred + " model."
or
not type.regexpMatch("[a-zA-Z0-9_\\$<>]*") and