27 Commits

Author	SHA1	Message	Date
Tony Torralba	32471d326e	Java: Remove omittable exists variables	2023-01-10 13:37:19 +01:00
Jami	8a73675483	Merge pull request #11070 from jcogs33/java-regex-injection ... Java: Promote regex injection query from experimental	2022-11-21 15:04:26 -05:00
erik-krogh	c029048306	port the Java regex/redos queries to use the shared pack	2022-11-14 21:29:41 +01:00
Jami Cogswell	bada986433	apply review comments	2022-11-08 15:29:33 -05:00
Jami Cogswell	b99a1d2cd9	update sink and tests	2022-11-08 15:29:33 -05:00
Jami Cogswell	0e93e71127	update tests	2022-11-08 15:29:33 -05:00
Jami Cogswell	5402001362	remove original sanitizer	2022-11-08 15:29:33 -05:00
Jami Cogswell	5dcd3b2c0f	clean up files	2022-11-08 15:29:33 -05:00
Jami Cogswell	5b089bbb9c	split sanitizer into three	2022-11-08 15:29:33 -05:00
Jami Cogswell	91491d9a7b	refactor into more classes; add more test cases; add LITERAL sanitizer	2022-11-08 15:29:33 -05:00
Jami Cogswell	6545cff0ef	add Pattern.quote sanitizer	2022-11-08 15:29:33 -05:00
Jami Cogswell	833c5edf06	move to .qll file and switch to InlineExpectations tests	2022-11-08 15:29:32 -05:00
Jami Cogswell	25436fe555	update options and qlref files	2022-11-08 15:29:32 -05:00
Jami Cogswell	32b140045e	move files out of experimental	2022-11-08 15:29:32 -05:00
Erik Krogh Kristensen	13482fc97b	rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"	2022-06-23 14:36:25 +02:00
Erik Krogh Kristensen	3be4a86acd	make ReDoSPruning into a parameterized module	2022-06-23 14:36:25 +02:00
Erik Krogh Kristensen	dc06e9df02	move predicates that depend on isReDoSCandidate into a ReDoSPruning module	2022-06-23 14:36:24 +02:00
Joe Farebrother	64227c9109	Fix codescanning alerts	2022-05-04 15:58:30 +01:00
Joe Farebrother	1605d36ddf	Refine polynomial redos sources to exclude length limited methods	2022-05-04 15:41:39 +01:00
Joe Farebrother	6794268a3c	Split PolynomialRedos definition into a library to avoid duplication in the tests	2022-05-04 15:41:38 +01:00
Joe Farebrother	5555985ad6	Distingush between whether or not a regex is matched against a full string ... Also some fixes and additional tests	2022-05-04 15:41:38 +01:00
Joe Farebrother	bb562643c6	Support possessive quantifiers, which cannot backtrack. ... They are approximated by limiting them to up to one repetition (effectively making *+ like ? and ++ like a no-op).	2022-05-04 15:41:37 +01:00
Joe Farebrother	3ce0c2c23b	Add more regex use functions in String	2022-05-04 15:41:36 +01:00
Joe Farebrother	57ba8a4d1b	Improve handling of hex escapes; and support some named character classes	2022-05-04 15:41:36 +01:00
Joe Farebrother	5143585080	Fix to PolynomialRedos not finding results and to test cases not finding that	2022-05-04 15:41:36 +01:00
Joe Farebrother	e23162d91b	Add test cases for PolynomialRedos dataflow logic; make fixes	2022-05-04 15:41:35 +01:00
Joe Farebrother	5a4316d945	Add test cases for exponential redos query	2022-05-04 15:41:35 +01:00