We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1a64393 commit 6e33dd5Copy full SHA for 6e33dd5
ruby/ql/test/query-tests/security/cwe-1333-polynomial-redos/PolynomialReDoS.rb
@@ -49,4 +49,20 @@ def some_request_handler
49
puts "foo"
50
end
51
52
+
53
+ def some_other_request_handle
54
+ name = params[:name] # source
55
56
+ indirect_use_of_reg /^\s+|\s+$/, name
57
58
+ as_string_indirect '^\s+|\s+$', name
59
+ end
60
61
+ def indirect_use_of_reg (reg, input)
62
+ input.gsub reg, '' # NOT GOOD
63
64
65
+ def as_string_indirect (reg_as_string, input)
66
+ input.match? reg_as_string, '' # NOT GOOD
67
68
0 commit comments