hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: add change note for rb/regexp-injection

Browse Source
This commit is contained in:
Nick Rolfe
2021-10-29 11:28:34 +01:00
parent bd92403b42
commit fed0a06353
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/change-notes/2021-10-29-regexp-injection.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* A new query (`rb/regexp-injection`) has been added. The query finds regular expressions constructed from user input, which could allow an attacker to perform a Regular Expression Denial of Service (ReDoS) attack.