FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Add comment by models using `regex-use` sink kind · github/codeql@3edeb82 · GitHub

/ codeql Public

Commit 3edeb82

Browse files
owen-mc
committed
Add comment by models using regex-use sink kind
1 parent 89f9581 commit 3edeb82

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

‎java/ql/lib/ext/org.apache.commons.lang3.model.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ extensions:
33
pack: codeql/java-all
44
extensible: sinkModel
55
data:
6+
# Note these sinks do not use the sink kind `regex-use[0]` because they should be considered as sinks for regex injection but not polynomial ReDoS.
67
- ["org.apache.commons.lang3", "RegExUtils", False, "removeAll", "(String,String)", "", "Argument[1]", "regex-use", "manual"]
78
- ["org.apache.commons.lang3", "RegExUtils", False, "removeFirst", "(String,String)", "", "Argument[1]", "regex-use", "manual"]
89
- ["org.apache.commons.lang3", "RegExUtils", False, "removePattern", "(String,String)", "", "Argument[1]", "regex-use", "manual"]

0 commit comments

Comments
 (0)
Back | FazBrowse Home | New Git URL