hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 19:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

add library input as source for js/polynomial-redos

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-01-12 14:04:55 +01:00
parent 1c8547c897
commit eaee5c2d87
6 changed files with 51 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/src/Performance/PolynomialReDoS.ql
View File

@@ -25,4 +25,5 @@ where
sink.getNode().(Sink).getRegExp().(PolynomialBackTrackingTerm).isAtEndLine()
)
select sink.getNode(), source, sink, "This expensive $@ use depends on $@.",
sink.getNode().(Sink).getRegExp(), "regular expression", source.getNode(), "a user-provided value"
sink.getNode().(Sink).getRegExp(), "regular expression", source.getNode(),
source.getNode().(Source).describe()