generic-remediation-reports.regex-injection.report.json Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of codemodder-base Show documentation

Base framework for writing codemods in Java

There is a newer version: 0.98.6

{
  "summary" : "Escaped regex metacharacters to prevent abuse",
  "change" : "Escaped regex metacharacters to prevent abuse",
  "reviewGuidanceIJustification" : "We believe this change is effective, and it will not break applications unless intentionally allowing users to specify regex patterns.",
  "references" : ["https://cwe.mitre.org/data/definitions/400.html", "https://wiki.sei.cmu.edu/confluence/display/java/IDS08-J.+Sanitize+untrusted+data+included+in+a+regular+expression"]
}