Merge pull request #6972 from yoff/python/promote-redos

Python: Promote ReDoS queries
2025-12-18 01:33:15 +01:00 · 2021-11-23 14:02:09 +01:00
parent 9d072a12ed 7201b3e116
commit 8cccee6eba
10 changed files with 5 additions and 2 deletions
--- a/python/change-notes/2021-10-28-promote-ReDoS-queries.md
+++ b/python/change-notes/2021-10-28-promote-ReDoS-queries.md
@@ -0,0 +1,3 @@
+lgtm,codescanning
+* The query "Inefficient regular expression" (`py/redos`) has been promoted from experimental to the main query pack. Its results will now appear by default.
+* The query "Polynomial regular expression used on uncontrolled data" (`py/polynomial-redos`) has been promoted from experimental to the main query pack. Its results will now appear by default.
--- a/python/ql/src/experimental/Security/CWE-730/PolynomialBackTracking.ql
+++ b/python/ql/src/experimental/Security/CWE-730/PolynomialBackTracking.ql
--- a/python/ql/src/experimental/Security/CWE-730/PolynomialReDoS.qhelp
+++ b/python/ql/src/experimental/Security/CWE-730/PolynomialReDoS.qhelp
--- a/python/ql/src/experimental/Security/CWE-730/PolynomialReDoS.ql
+++ b/python/ql/src/experimental/Security/CWE-730/PolynomialReDoS.ql
--- a/python/ql/src/experimental/Security/CWE-730/ReDoS.qhelp
+++ b/python/ql/src/experimental/Security/CWE-730/ReDoS.qhelp
--- a/python/ql/src/experimental/Security/CWE-730/ReDoS.ql
+++ b/python/ql/src/experimental/Security/CWE-730/ReDoS.ql
--- a/python/ql/src/experimental/Security/CWE-730/ReDoSIntroduction.inc.qhelp
+++ b/python/ql/src/experimental/Security/CWE-730/ReDoSIntroduction.inc.qhelp
--- a/python/ql/src/experimental/Security/CWE-730/ReDoSReferences.inc.qhelp
+++ b/python/ql/src/experimental/Security/CWE-730/ReDoSReferences.inc.qhelp
--- a/python/ql/test/query-tests/Security/CWE-730-PolynomialReDoS/PolynomialReDoS.qlref
+++ b/python/ql/test/query-tests/Security/CWE-730-PolynomialReDoS/PolynomialReDoS.qlref
@@ -1 +1 @@
-experimental/Security/CWE-730/PolynomialReDoS.ql
+Security/CWE-730/PolynomialReDoS.ql
--- a/python/ql/test/query-tests/Security/CWE-730-ReDoS/ReDoS.qlref
+++ b/python/ql/test/query-tests/Security/CWE-730-ReDoS/ReDoS.qlref
@@ -1 +1 @@
-experimental/Security/CWE-730/ReDoS.ql
+Security/CWE-730/ReDoS.ql