hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 03:06:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

RegexInjection docs

Browse Source
This commit is contained in:
Ed Minnix
2023-03-29 07:24:32 -04:00
parent 17cdd16c19
commit c8579d8c26
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll
View File

@@ -31,4 +31,7 @@ module RegexInjectionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer } predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer }
} }
/**
* Taint-tracking flow for untrusted user input used to construct regular expressions.
*/
module RegexInjectionFlow = TaintTracking::Global<RegexInjectionConfig>; module RegexInjectionFlow = TaintTracking::Global<RegexInjectionConfig>;