Commits

Breadcrumbs

History for

on95f994a

User selector

All users

All time

Commit History

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Jun 23, 2022

• add deprecated aliases in the old locations, and use the Query.qll pattern for js/polynomial-redos

  erik-krogh

  committed
  3bea7df

  Copy full SHA for 3bea7df

• rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"

  erik-krogh

  committed
  13482fc

  Copy full SHA for 13482fc

• make ReDoSPruning into a parameterized module

  erik-krogh

  committed
  3be4a86

  Copy full SHA for 3be4a86

• move predicates that depend on isReDoSCandidate into a ReDoSPruning module

  erik-krogh

  committed
  dc06e9d

  Copy full SHA for dc06e9d

Commits on May 27, 2022

• use syntactically correct JS in poly-redos example

  erik-krogh

  committed
  fef87db

  Copy full SHA for fef87db

Commits on Jun 28, 2021

• JS: Refactor ReDoS to make files sharable

  Show description for d2eeaff
  yoff

  committed
  d2eeaff

  Copy full SHA for d2eeaff

Commits on Jun 22, 2021

• add CWE-1333 to the JS ReDoS queries

  erik-krogh

  committed
  a4303bc

  Copy full SHA for a4303bc

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Mar 4, 2021

• Use `.inc.qhelp` extension for included help files

  Marcono1234

  committed
  5a8ffa5

  Copy full SHA for 5a8ffa5

Commits on Jan 14, 2021

• improve alert message for js/polynomial-redos

  erik-krogh

  committed
  c5595f4

  Copy full SHA for c5595f4

• highlight the use of the regular expression, instead of the sink for user input

  erik-krogh

  committed
  a520a51

  Copy full SHA for a520a51

• adjust `description` to not mention user-provided values

  erik-krogh

  committed
  e8ea720

  Copy full SHA for e8ea720

Commits on Jan 12, 2021

• add library input as source for `js/polynomial-redos`

  erik-krogh

  committed
  eaee5c2

  Copy full SHA for eaee5c2

Commits on Jan 7, 2021

• add comment about regexp detected by js/polynomial-redos

  erik-krogh

  committed
  7e21081

  Copy full SHA for 7e21081

Commits on Jan 6, 2021

• add comment in isFork about /(a*)*/ regular expressions

  erik-krogh

  committed
  28cffa1

  Copy full SHA for 28cffa1

• reintroduce performance improvement - but sound this time

  erik-krogh

  committed
  c58f67b

  Copy full SHA for c58f67b

• autoformat

  erik-krogh

  committed
  4392f02

  Copy full SHA for 4392f02

• support nested stars in js/ReDoS

  erik-krogh

  committed
  3d98732

  Copy full SHA for 3d98732

• undo unsound optimization in js/ReDoS

  erik-krogh

  committed
  77967c3

  Copy full SHA for 77967c3

Commits on Dec 18, 2020

• refactor to share predicates between regular expression queries

  erik-krogh

  committed
  34dda6d

  Copy full SHA for 34dda6d

Commits on Dec 3, 2020

• revert marking repetitions with possibly empty body as forks

  erik-krogh

  committed
  cc98c41

  Copy full SHA for cc98c41

Commits on Nov 29, 2020

• refine isFork to remove false positive when a state has epsilon transition to itself

  erik-krogh

  committed
  33b2701

  Copy full SHA for 33b2701

Commits on Nov 27, 2020

• detect ReDoS when the choices are "match some string" or "match Epsilon"

  erik-krogh

  committed
  729073f

  Copy full SHA for 729073f

• introduce a printable state class

  erik-krogh

  committed
  46ca564

  Copy full SHA for 46ca564

• remove unnecessary one-step inline

  erik-krogh

  committed
  8a3e87f

  Copy full SHA for 8a3e87f

• performance improvements for suffix check in js/redos

  erik-krogh

  committed
  36b9f02

  Copy full SHA for 36b9f02

Commits on Nov 26, 2020

• more pruning based on states being inside a repetition

  erik-krogh

  committed
  f576144

  Copy full SHA for f576144

Commits on Nov 25, 2020

• adjust comments to reflect the precission of the suffix search

  erik-krogh

  committed
  11d878b

  Copy full SHA for 11d878b

• rename `witness` to `pump`

  erik-krogh

  committed
  500b94b

  Copy full SHA for 500b94b

• only search prefixes/suffixes from the candidates that are used in the end

  erik-krogh

  committed
  e03c19b

  Copy full SHA for e03c19b

• only construct prefix/suffix for regular expressions that has a pumpable state

  erik-krogh

  committed
  b8fabfa

  Copy full SHA for b8fabfa

• model accept states more accurately by adding an AcceptAny state, modelling `$`, and checking the existence of rejecting suffixes

  erik-krogh

  committed
  a8944c8

  Copy full SHA for a8944c8

• escape tabs

  erik-krogh

  committed
  d9ebb7b

  Copy full SHA for d9ebb7b