From c8579d8c26e61cf7e89c6d392e20abb7f8f23fcc Mon Sep 17 00:00:00 2001 From: Ed Minnix Date: Wed, 29 Mar 2023 07:24:32 -0400 Subject: [PATCH] RegexInjection docs --- .../semmle/code/java/security/regexp/RegexInjectionQuery.qll | 3 +++ 1 file changed, 3 insertions(+) diff --git a/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll b/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll index af8b4e204a1..409143c18f8 100644 --- a/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll +++ b/java/ql/lib/semmle/code/java/security/regexp/RegexInjectionQuery.qll @@ -31,4 +31,7 @@ module RegexInjectionConfig implements DataFlow::ConfigSig { predicate isBarrier(DataFlow::Node node) { node instanceof RegexInjectionSanitizer } } +/** + * Taint-tracking flow for untrusted user input used to construct regular expressions. + */ module RegexInjectionFlow = TaintTracking::Global;