hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 12:16:33 +01:00
Code Issues Packages Projects Releases Wiki Activity

move predicates that depend on isReDoSCandidate into a ReDoSPruning module

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-02-14 13:11:49 +01:00
parent 3248f7b423
commit dc06e9df02
12 changed files with 1272 additions and 1264 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Performance/ReDoS.ql
View File

@@ -19,7 +19,7 @@ import semmle.javascript.security.performance.ReDoSUtil
import semmle.javascript.security.performance.ExponentialBackTracking
from RegExpTerm t, string pump, State s, string prefixMsg
where hasReDoSResult(t, pump, s, prefixMsg)
where ReDoSPruning::hasReDoSResult(t, pump, s, prefixMsg)
select t,
"This part of the regular expression may cause exponential backtracking on strings " + prefixMsg +
"containing many repetitions of '" + pump + "'."