Ruby: enable for PolyReDos but document why it still doesnt work

This commit is contained in:
Asger F
2025-07-01 15:52:37 +02:00
parent 8b345518f4
commit d65da1f8a1

View File

@@ -18,6 +18,18 @@ private module PolynomialReDoSConfig implements DataFlow::ConfigSig {
predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
// Diff-informedness is disabled because of RegExpTerms having incorrect locations when
// the regexp is parsed from a string arising from constant folding.
predicate observeDiffInformedIncrementalMode() { none() }
Location getASelectedSinkLocation(DataFlow::Node sink) {
result = sink.(Sink).getHighlight().getLocation()
}
Location getASelectedSinkLocationApprox(DataFlow::Node sink) {
result = sink.(Sink).getRegExp().getRootTerm().getLocation()
}
}
/**