Skip to content

Commit 6e33dd5

Browse files
committed
add failing test
1 parent 1a64393 commit 6e33dd5

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

ruby/ql/test/query-tests/security/cwe-1333-polynomial-redos/PolynomialReDoS.rb

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,4 +49,20 @@ def some_request_handler
4949
puts "foo"
5050
end
5151
end
52+
53+
def some_other_request_handle
54+
name = params[:name] # source
55+
56+
indirect_use_of_reg /^\s+|\s+$/, name
57+
58+
as_string_indirect '^\s+|\s+$', name
59+
end
60+
61+
def indirect_use_of_reg (reg, input)
62+
input.gsub reg, '' # NOT GOOD
63+
end
64+
65+
def as_string_indirect (reg_as_string, input)
66+
input.match? reg_as_string, '' # NOT GOOD
67+
end
5268
end

0 commit comments

Comments
 (0)