Module PolynomialReDoS

Provides default sources, sinks and sanitizers for reasoning about polynomial regular expression denial-of-service attacks, as well as extension points for adding your own.

Import path

import codeql.ruby.security.regexp.PolynomialReDoSCustomizations

Imports

Make<RegExpTreeView::Impl>

A parameterized module implementing the analysis described in the above papers.

Classes

LengthGuard	A check on the length of a string, seen as a sanitizer guard.
LibraryInputAsSource	A library input, considered as a flow source.
PolynomialBackTrackingTermMatch	A regexp match against a superlinear backtracking term, seen as a sink for polynomial regular expression denial-of-service vulnerabilities.
RemoteFlowSourceAsSource	A source of remote user input, considered as a flow source.
Sanitizer	A sanitizer for polynomial regular expression denial-of-service vulnerabilities.
Sink	A data flow sink node for polynomial regular expression denial-of-service vulnerabilities.
Source	A data flow source node for polynomial regular expression denial-of-service vulnerabilities.