14 Commits

Author	SHA1	Message	Date
Asger F	c55300d4b0	JS: Port PolynomialReDoS	2023-10-13 13:15:06 +02:00
erik-krogh	e18ceba49e	port the JS regex/redos queries to use the shared pack	2022-11-15 17:14:38 +01:00
Erik Krogh Kristensen	3bea7df45d	add deprecated aliases in the old locations, and use the Query.qll pattern for js/polynomial-redos	2022-06-23 14:36:25 +02:00
Erik Krogh Kristensen	13482fc97b	rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"	2022-06-23 14:36:25 +02:00
Erik Krogh Kristensen	a4303bc81d	add CWE-1333 to the JS ReDoS queries	2021-06-22 10:24:56 +02:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Erik Krogh Kristensen	c5595f4cbd	improve alert message for js/polynomial-redos	2021-01-14 13:48:26 +01:00
Erik Krogh Kristensen	a520a51d42	highlight the use of the regular expression, instead of the sink for user input	2021-01-14 11:22:20 +01:00
Erik Krogh Kristensen	e8ea720650	adjust description to not mention user-provided values	2021-01-14 10:36:10 +01:00
Erik Krogh Kristensen	eaee5c2d87	add library input as source for js/polynomial-redos	2021-01-12 20:21:33 +01:00
Erik Krogh Kristensen	b02004430c	prune results that end with newline, where the input cannot contain newlines	2020-11-03 14:48:39 +01:00
Asger Feldthaus	fefcf1a7a6	JS: Autoformat everything	2020-02-27 09:41:01 +00:00
Esben Sparre Andreasen	1b73cee692	JS: add js/exploitable-polynomial-redos	2020-02-27 08:42:43 +01:00