Java: PolynomialReDos (keep excluded)

d10c · d10c · commit b711832f8976 · 2025-07-07T17:51:30.000+02:00
diff --git a/java/ql/lib/semmle/code/java/security/regexp/PolynomialReDoSQuery.qll b/java/ql/lib/semmle/code/java/security/regexp/PolynomialReDoSQuery.qll
@@ -47,10 +47,6 @@ module PolynomialRedosConfig implements DataFlow::ConfigSig {
     node instanceof SimpleTypeSanitizer or
     node.asExpr().(MethodCall).getMethod() instanceof LengthRestrictedMethod
   }
-
-  predicate observeDiffInformedIncrementalMode() {
-    any() // TODO: Make sure that the location overrides match the query's select clause: Column 5 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql@28:67:28:72)
-  }
 }
 
 module PolynomialRedosFlow = TaintTracking::Global<PolynomialRedosConfig>;

Original file line number	Diff line number	Diff line change
`@@ -47,10 +47,6 @@ module PolynomialRedosConfig implements DataFlow::ConfigSig {`
`47`	`47`	`node instanceof SimpleTypeSanitizer or`
`48`	`48`	`node.asExpr().(MethodCall).getMethod() instanceof LengthRestrictedMethod`
`49`	`49`	`}`
`50`		`-`
`51`		`- predicate observeDiffInformedIncrementalMode() {`
`52`		`- any() // TODO: Make sure that the location overrides match the query's select clause: Column 5 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql@28:67:28:72)`
`53`		`- }`
`54`	`50`	`}`
`55`	`51`
`56`	`52`	`module PolynomialRedosFlow = TaintTracking::Global<PolynomialRedosConfig>;`