JS: Port PolynomialReDoS

This commit is contained in:
Asger F
2023-10-05 09:26:50 +02:00
parent b8847dbc5d
commit c55300d4b0
4 changed files with 444 additions and 324 deletions

View File

@@ -15,13 +15,13 @@
import javascript
import semmle.javascript.security.regexp.PolynomialReDoSQuery
import DataFlow::PathGraph
import PolynomialReDoSFlow::PathGraph
from
Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, Sink sinkNode,
PolynomialReDoSFlow::PathNode source, PolynomialReDoSFlow::PathNode sink, Sink sinkNode,
PolynomialBackTrackingTerm regexp
where
cfg.hasFlowPath(source, sink) and
PolynomialReDoSFlow::flowPath(source, sink) and
sinkNode = sink.getNode() and
regexp = sinkNode.getRegExp() and
not (