hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: condense '.' matching

Browse Source
This commit is contained in:
Jami Cogswell
2025-03-17 15:20:14 -04:00
parent 2f6696e8a8
commit b9f642f4aa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/PathSanitizer.qll
View File

@@ -428,7 +428,7 @@ private predicate replacesDirectoryCharactersWithSingleReplaceAll(
targetValue.matches("[%\\\\\\\\%]")
or
targetValue.matches("%|%") and
targetValue.matches("%" + ["\\.\\.", "[.][.]", "\\."] + "%") and
targetValue.matches("%" + ["[.]", "\\."] + "%") and
targetValue.matches("%/%") and
targetValue.matches("%\\\\\\\\%")
)