RegexInjection docs

egregius313 · egregius313 · commit c8579d8c26e6 · 2023-03-29T07:24:32.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll b/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll
@@ -31,4 +31,7 @@ module RegexInjectionConfig implements DataFlow::ConfigSig {
   predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer }
 }
 
+/**
+ * Taint-tracking flow for untrusted user input used to construct regular expressions.
+ */
 module RegexInjectionFlow = TaintTracking::Global<RegexInjectionConfig>;

Original file line number	Diff line number	Diff line change
`@@ -31,4 +31,7 @@ module RegexInjectionConfig implements DataFlow::ConfigSig {`
`31`	`31`	`predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer }`
`32`	`32`	`}`
`33`	`33`
	`34`	`+/**`
	`35`	`+ * Taint-tracking flow for untrusted user input used to construct regular expressions.`
	`36`	`+ */`
`34`	`37`	`module RegexInjectionFlow = TaintTracking::Global<RegexInjectionConfig>;`