Erik Krogh Kristensen
|
bff59a1aaa
|
fix parse error in regular expressions
|
2021-03-08 12:04:11 +01:00 |
|
Asger Feldthaus
|
fd9604c5ef
|
JS: Update expected output for poly ReDoS
|
2021-03-02 12:39:05 +00:00 |
|
Asger Feldthaus
|
12079cd1e4
|
JS: Recognize RegExps in JSON schemas
|
2021-03-02 12:39:04 +00:00 |
|
Erik Krogh Kristensen
|
d14586de56
|
add two non ReDoS regular expressions to the ReDoS test suite
Adds the regular expression from #5145
|
2021-02-11 14:41:45 +01:00 |
|
Erik Krogh Kristensen
|
a44aefa6c9
|
add test for top-level closure modules - and simplify
|
2021-01-20 19:47:32 +01:00 |
|
Erik Krogh Kristensen
|
fbfbe70deb
|
add support for unnamed/default exports in PackageExports.qll
|
2021-01-19 22:40:45 +01:00 |
|
Erik Krogh Kristensen
|
01900d7ca2
|
remove false positive due to "\n" not being in the relevant relation
|
2021-01-18 14:47:29 +01:00 |
|
Erik Krogh Kristensen
|
1506ac09e5
|
limit the number of characters produced by getAThreewayIntersect
|
2021-01-15 13:54:16 +01:00 |
|
Erik Krogh Kristensen
|
c5595f4cbd
|
improve alert message for js/polynomial-redos
|
2021-01-14 13:48:26 +01:00 |
|
Erik Krogh Kristensen
|
86e33d9d79
|
select the shortest possible reason
|
2021-01-14 13:38:37 +01:00 |
|
Erik Krogh Kristensen
|
a520a51d42
|
highlight the use of the regular expression, instead of the sink for user input
|
2021-01-14 11:22:20 +01:00 |
|
Erik Krogh Kristensen
|
d71adff079
|
dont sanitize global replacements where the regexp is a char class
|
2021-01-13 10:12:12 +01:00 |
|
Erik Krogh Kristensen
|
eaee5c2d87
|
add library input as source for js/polynomial-redos
|
2021-01-12 20:21:33 +01:00 |
|
Erik Krogh Kristensen
|
3d98732136
|
support nested stars in js/ReDoS
|
2021-01-06 10:37:35 +01:00 |
|
Erik Krogh Kristensen
|
77967c3e63
|
undo unsound optimization in js/ReDoS
|
2021-01-06 10:36:21 +01:00 |
|
Erik Krogh Kristensen
|
b42aac17d5
|
add more tests for js/ReDoS
|
2021-01-06 10:34:06 +01:00 |
|
Erik Krogh Kristensen
|
ce8cc2368b
|
improve precision of intersect
|
2021-01-04 11:55:51 +01:00 |
|
Erik Krogh Kristensen
|
cbad705029
|
general performance improvements in the ReDoS utility library
|
2020-12-21 11:49:21 +01:00 |
|
Erik Krogh Kristensen
|
05569187b4
|
improve performance of suffix checking
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
6369374224
|
implement new algorithm for detecting superlinear backtracking in regular expressions
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
7ce91e9146
|
introduce cannonical representatives of RegExpTerms to decrease the number of InputSymbols in the NFA
|
2020-12-18 17:21:11 +01:00 |
|
Erik Krogh Kristensen
|
b2116dc5b4
|
add more tests for polynomial/exponential redos
|
2020-12-18 13:19:17 +01:00 |
|
Erik Krogh Kristensen
|
cc98c41dd6
|
revert marking repetitions with possibly empty body as forks
|
2020-12-03 20:08:07 +01:00 |
|
Erik Krogh Kristensen
|
33b2701551
|
refine isFork to remove false positive when a state has epsilon transition to itself
|
2020-11-29 21:42:50 +01:00 |
|
Erik Krogh Kristensen
|
d7b22e3b1b
|
update expected output for PolynomialBackTracking
|
2020-11-27 20:15:27 +01:00 |
|
Erik Krogh Kristensen
|
729073fb43
|
detect ReDoS when the choices are "match some string" or "match Epsilon"
|
2020-11-27 20:15:23 +01:00 |
|
Erik Krogh Kristensen
|
e177d46c0a
|
add two test cases that demonstrate the limits of the suffix construction
|
2020-11-27 13:45:34 +01:00 |
|
Erik Krogh Kristensen
|
9468a6e8dc
|
update expected output
|
2020-11-26 12:32:55 +01:00 |
|
Erik Krogh Kristensen
|
1b3c3ef4cb
|
adjust comments in ReDoS test case
|
2020-11-26 10:31:44 +01:00 |
|
Erik Krogh Kristensen
|
b418cb5fe0
|
add test case where the successor of the repeating term matches epsilon
|
2020-11-25 13:59:10 +01:00 |
|
Erik Krogh Kristensen
|
c5f5206174
|
update expected output
|
2020-11-25 13:57:20 +01:00 |
|
Erik Krogh Kristensen
|
a8944c8953
|
model accept states more accurately by adding an AcceptAny state, modelling $, and checking the existence of rejecting suffixes
|
2020-11-25 13:57:20 +01:00 |
|
Erik Krogh Kristensen
|
d9ebb7b20e
|
escape tabs
|
2020-11-25 13:57:20 +01:00 |
|
Erik Krogh Kristensen
|
bcb2f2768d
|
search for a prefix to the state that causes exponential backtracking
|
2020-11-25 13:57:20 +01:00 |
|
Erik Krogh Kristensen
|
c4153a617e
|
remove duplicated test cases from ReDoS, and adjust variables names to match test output
|
2020-11-18 14:49:09 +01:00 |
|
Erik Krogh Kristensen
|
8270bf5bb9
|
make the character search skip unencodable characters
|
2020-11-18 11:55:49 +01:00 |
|
Erik Krogh Kristensen
|
55f2f86a26
|
limit the search of state-pairs to the ones that are reachable within the given length
|
2020-11-18 09:23:35 +01:00 |
|
Erik Krogh Kristensen
|
c4d7533701
|
Merge branch 'main' into moreReDoS
|
2020-11-17 17:34:49 +01:00 |
|
Erik Krogh Kristensen
|
97acf1fd87
|
fix FP related to inverted character classes choosing a char that was not matched by the char class
|
2020-11-17 17:34:43 +01:00 |
|
Erik Krogh Kristensen
|
e01d4b104e
|
update expected output
|
2020-11-10 23:42:38 +01:00 |
|
Erik Krogh Kristensen
|
3ef5d89e39
|
update expected output
|
2020-11-08 23:27:38 +01:00 |
|
Erik Krogh Kristensen
|
17a687b344
|
testing many possible intersections, instead of a single intersection
|
2020-11-08 23:24:36 +01:00 |
|
Erik Krogh Kristensen
|
34fd0d89f5
|
finding the minimum that is not an FP - instead of finding the minimum and then checking if it was an FP. And detecting more FPs by finding when a witness pass through the accept state
|
2020-11-08 23:24:27 +01:00 |
|
Erik Krogh Kristensen
|
ac514b1739
|
remove false positives where the analysis would wrongly conclude that the accept state could not be reached
|
2020-11-08 23:24:03 +01:00 |
|
Erik Krogh Kristensen
|
a5e75f53ff
|
add support for escape char classes inside char classes
|
2020-11-08 23:22:49 +01:00 |
|
Erik Krogh Kristensen
|
0063cb140c
|
add support for \W, \S, \D
|
2020-11-08 23:16:56 +01:00 |
|
Erik Krogh Kristensen
|
2dd8b6ffef
|
support \f and \v in the \s class
|
2020-11-08 23:16:56 +01:00 |
|
Erik Krogh Kristensen
|
68fe03060d
|
support \d \s and \w in ReDoS.ql
|
2020-11-08 23:16:56 +01:00 |
|
Erik Krogh Kristensen
|
fa54ad1a5e
|
refactor character class implementation in ReDoS.ql - preparing support for RegExpCharacterClassEscape
|
2020-11-08 23:16:55 +01:00 |
|
Erik Krogh Kristensen
|
a09ffd5cda
|
expand getAOverlapBetweenCharacterClasses to support overlap between more char classes
|
2020-11-08 23:16:37 +01:00 |
|