Erik Krogh Kristensen
|
0d8bef7e92
|
Merge pull request #6736 from erik-krogh/polyReplace
JS: track flow through string replace calls that just replace single chars for js/polynomial-redos
|
2022-05-04 16:30:20 +02:00 |
|
Erik Krogh Kristensen
|
ad3399733b
|
recognize more module exports from the factory pattern
|
2022-02-23 21:29:45 +01:00 |
|
Erik Krogh Kristensen
|
d55920ad27
|
add model for the snapdragon library
|
2022-02-10 11:32:59 +01:00 |
|
Erik Krogh Kristensen
|
1a8b6d7414
|
recognize ranges without upper bounds
|
2022-01-07 18:38:01 +01:00 |
|
Erik Krogh Kristensen
|
acaf294bee
|
support a limited number of regexp ranges
|
2022-01-07 18:36:30 +01:00 |
|
Erik Krogh Kristensen
|
6327fced6f
|
remove paths without unmatched returns from polynomial-redos
|
2021-12-02 10:03:28 +01:00 |
|
Erik Krogh Kristensen
|
474c808373
|
Merge pull request #7137 from erik-krogh/functionExport
JS: recognize library inputs when the library exports "through" a function
|
2021-11-17 09:49:02 +01:00 |
|
Erik Krogh Kristensen
|
b9ea4a8709
|
recognize library inputs when the library exports "through" a function
|
2021-11-15 22:43:38 +01:00 |
|
Erik Krogh Kristensen
|
2163648b39
|
fix location off-by-ones with regexp parsing
|
2021-11-15 13:43:39 +01:00 |
|
Erik Krogh Kristensen
|
12305aae42
|
extract regexp literals from string concatenations
|
2021-10-28 10:44:33 +02:00 |
|
Erik Krogh Kristensen
|
a082ed917c
|
track flow through string replace calls that just replace single chars
|
2021-09-22 19:43:48 +02:00 |
|
Erik Krogh Kristensen
|
805d1d170c
|
do not filter away regular expressions with lookbehinds
|
2021-09-22 17:14:29 +02:00 |
|
CodeQL CI
|
b4963c7538
|
Merge pull request #6558 from erik-krogh/redosCasing
Approved by esbena, yoff
|
2021-09-02 12:20:08 +01:00 |
|
Erik Krogh Kristensen
|
486b283c20
|
support the "module" field in package.json files
|
2021-08-30 11:05:32 +02:00 |
|
Erik Krogh Kristensen
|
f5a1a12435
|
support case insensitive regexps in the ReDoS queries
|
2021-08-30 09:59:33 +02:00 |
|
Erik Krogh Kristensen
|
5d232bbfce
|
recognize more src folders when "main" in package.json points to a compiled output
|
2021-08-23 08:09:01 +02:00 |
|
Erik Krogh Kristensen
|
6da1007f67
|
mark new redos tests correctly
|
2021-07-16 13:37:47 +02:00 |
|
Erik Krogh Kristensen
|
b2b736db10
|
add more tests for non-empty positive lookaheads
|
2021-07-16 13:25:37 +02:00 |
|
Erik Krogh Kristensen
|
80d784e37a
|
add a step over empty lookaheads/lookbehinds
|
2021-07-14 23:40:04 +02:00 |
|
Erik Krogh Kristensen
|
aaf754ebf5
|
recognize more library input
|
2021-05-04 10:06:14 +02:00 |
|
Asger Feldthaus
|
fd9604c5ef
|
JS: Update expected output for poly ReDoS
|
2021-03-02 12:39:05 +00:00 |
|
Erik Krogh Kristensen
|
a44aefa6c9
|
add test for top-level closure modules - and simplify
|
2021-01-20 19:47:32 +01:00 |
|
Erik Krogh Kristensen
|
fbfbe70deb
|
add support for unnamed/default exports in PackageExports.qll
|
2021-01-19 22:40:45 +01:00 |
|
Erik Krogh Kristensen
|
1506ac09e5
|
limit the number of characters produced by getAThreewayIntersect
|
2021-01-15 13:54:16 +01:00 |
|
Erik Krogh Kristensen
|
86e33d9d79
|
select the shortest possible reason
|
2021-01-14 13:38:37 +01:00 |
|
Erik Krogh Kristensen
|
d71adff079
|
dont sanitize global replacements where the regexp is a char class
|
2021-01-13 10:12:12 +01:00 |
|
Erik Krogh Kristensen
|
eaee5c2d87
|
add library input as source for js/polynomial-redos
|
2021-01-12 20:21:33 +01:00 |
|
Erik Krogh Kristensen
|
b42aac17d5
|
add more tests for js/ReDoS
|
2021-01-06 10:34:06 +01:00 |
|
Erik Krogh Kristensen
|
ce8cc2368b
|
improve precision of intersect
|
2021-01-04 11:55:51 +01:00 |
|
Erik Krogh Kristensen
|
cbad705029
|
general performance improvements in the ReDoS utility library
|
2020-12-21 11:49:21 +01:00 |
|
Erik Krogh Kristensen
|
05569187b4
|
improve performance of suffix checking
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
6369374224
|
implement new algorithm for detecting superlinear backtracking in regular expressions
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
b2116dc5b4
|
add more tests for polynomial/exponential redos
|
2020-12-18 13:19:17 +01:00 |
|
Erik Krogh Kristensen
|
d7b22e3b1b
|
update expected output for PolynomialBackTracking
|
2020-11-27 20:15:27 +01:00 |
|
Erik Krogh Kristensen
|
9468a6e8dc
|
update expected output
|
2020-11-26 12:32:55 +01:00 |
|
Erik Krogh Kristensen
|
c5f5206174
|
update expected output
|
2020-11-25 13:57:20 +01:00 |
|
Erik Krogh Kristensen
|
c4153a617e
|
remove duplicated test cases from ReDoS, and adjust variables names to match test output
|
2020-11-18 14:49:09 +01:00 |
|
Erik Krogh Kristensen
|
55f2f86a26
|
limit the search of state-pairs to the ones that are reachable within the given length
|
2020-11-18 09:23:35 +01:00 |
|
Erik Krogh Kristensen
|
c4d7533701
|
Merge branch 'main' into moreReDoS
|
2020-11-17 17:34:49 +01:00 |
|
Erik Krogh Kristensen
|
e01d4b104e
|
update expected output
|
2020-11-10 23:42:38 +01:00 |
|
Erik Krogh Kristensen
|
3ef5d89e39
|
update expected output
|
2020-11-08 23:27:38 +01:00 |
|
Erik Krogh Kristensen
|
e16fa0668a
|
update expected output
|
2020-11-04 18:24:31 +01:00 |
|
Erik Krogh Kristensen
|
ebc4856456
|
detect more expensive regexps in js/polynomial-redos
|
2020-10-30 09:52:13 +01:00 |
|
Erik Krogh Kristensen
|
b09015380a
|
add support for String.prototype.replaceAll
|
2020-09-21 10:50:04 +02:00 |
|
Esben Sparre Andreasen
|
1b73cee692
|
JS: add js/exploitable-polynomial-redos
|
2020-02-27 08:42:43 +01:00 |
|