Python: implement for polynomial redos

2026-04-25 16:55:19 +02:00 · 2025-01-23 14:01:46 +01:00
parent 15c2ccb880
commit 975ce064fc
3 changed files with 12 additions and 6 deletions
--- a/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
+++ b/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
@@ -23,7 +23,7 @@ from
 where
  PolynomialReDoSFlow::flowPath(source, sink) and
  sinkNode = sink.getNode() and
-  regexp.getRootTerm() = sinkNode.getRegExp()
+  regexp = sinkNode.getABacktrackingTerm()
 //   not (
 //     source.getNode().(Source).getKind() = "url" and
 //     regexp.isAtEndLine()