For other CodeQL resources, including tutorials and examples, see the CodeQL documentation

RegexInjectionQuery

Module RegexInjectionQuery

Provides a taint-tracking configuration for reasoning about untrusted user input used to construct regular expressions.


                                import semmle.code.csharp.security.dataflow.RegexInjectionQuery

The default C# QL library.

RegexEscapeSanitizer	A call to `Regex.Escape` that sanitizes the user input for use in a regex.
RegexObjectCreationSink	A `pattern` argument to a construction of a `Regex`.
RemoteSource	A source of remote user input.
Sanitizer	A sanitizer for untrusted user input used to construct regular expressions.
Sink	A data flow sink for untrusted user input used to construct regular expressions.
Source	A data flow source for untrusted user input used to construct regular expressions.
TaintTrackingConfiguration	DEPRECATED: Use `RegexInjection` instead.

A taint-tracking module for untrusted user input used to construct regular expressions.