hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 00:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Shorten the regex private domain match

Browse Source
This commit is contained in:
luchua-bc
2020-08-01 03:42:13 +00:00
parent ff58abb7d3
commit b65a033302
1 changed files with 1 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/experimental/Security/CWE/CWE-522/InsecureBasicAuth.ql
View File

@@ -72,13 +72,7 @@ class URIConstructor extends ClassInstanceExpr {
* Gets a regular expression for matching private hosts.
*/
private string getPrivateHostRegex() {
result = "(?i)localhost(/.*)?" or
result = "127\\.0\\.0\\.1(/.*)?" or // IPv4 patterns
result = "10(\\.[0-9]+){3}(/.*)?" or
result = "172\\.16(\\.[0-9]+){2}(/.*)?" or
result = "192.168(\\.[0-9]+){2}(/.*)?" or
result = "\\[0:0:0:0:0:0:0:1\\](/.*)?" or // IPv6 patterns
result = "\\[::1\\](/.*)?"
result = "(?i)localhost([:/].*)?|127\\.0\\.0\\.1([:/].*)?|10(\\.[0-9]+){3}([:/].*)?|172\\.16(\\.[0-9]+){2}([:/].*)?|192.168(\\.[0-9]+){2}([:/].*)?|\\[0:0:0:0:0:0:0:1\\]([:/].*)?|\\[::1\\]([:/].*)?"
}
/**