hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Restrict RegExp queries to actual regular expressions

Browse Source
This commit is contained in:
Asger F
2019-10-22 13:52:02 +01:00
parent b8711fc642
commit c21d095d38
12 changed files with 83 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/src/RegExp/BackrefIntoNegativeLookahead.ql
View File

@@ -17,7 +17,8 @@ from RegExpNegativeLookahead neg, RegExpGroup grp, RegExpBackRef back
where
grp.getParent+() = neg and
grp = back.getGroup() and
not back.getParent+() = neg
not back.getParent+() = neg and
neg.isPartOfRegExpLiteral()
select back,
"This back reference always matches the empty string, since it refers to $@, which is contained in $@.",
grp, "this capture group", neg, "a negative lookahead assertion"