Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JS: Sharpen up EnumerationRegExp #18892

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

JS: Sharpen up EnumerationRegExp #18892

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d97d673
JS: Add test case showing lack of flow through non-sanitising regexp
asgerf Feb 28, 2025
c3ad805
JS: Sharpen up EnumerationRegExp
asgerf Feb 28, 2025
c8a89c4
JS: Change note
asgerf Feb 28, 2025
2e32e44
Update javascript/ql/src/change-notes/2025-02-28-membership-regexp-te…
asgerf Feb 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Update javascript/ql/src/change-notes/2025-02-28-membership-regexp-te… 
…st.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
  • Loading branch information
@asgerf @Copilot
asgerf and Copilot authored Feb 28, 2025
commit 2e32e441b8f1fc1dcb08b311db2ba9e8e9faec24
2 changes: 1 addition & 1 deletion javascript/ql/src/change-notes/2025-02-28-membership-regexp-test.md
View file
Original file line number Diff line number Diff line change
@@ -2,6 +2,6 @@
category: fix
---
* Fixed a bug that would in rare cases cause some regexp-based checks
to seen as generic taint sanitisers, even though the underlying regexp
to be seen as generic taint sanitisers, even though the underlying regexp
is not restrictive enough. The regexps are now analysed more precisely,
and unrestrictive regexp checks will no longer block taint flow.