RegexInjection docs

2025-12-21 03:06:31 +01:00 · 2023-03-29 07:24:32 -04:00
parent 17cdd16c19
commit c8579d8c26
1 changed files with 3 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll
@@ -31,4 +31,7 @@ module RegexInjectionConfig implements DataFlow::ConfigSig {
  predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer }
 }

+/**
+ * Taint-tracking flow for untrusted user input used to construct regular expressions.
+ */
 module RegexInjectionFlow = TaintTracking::Global<RegexInjectionConfig>;