AdguardTeam / AdguardTeam/AGLint
Add a new rule for detecting regexps vulnerable to ReDoS
未關閉
feature request
Priority: P4
T: Linter rule
- 主要語言
- TypeScript
- 星號
- 71
- 分支
- 4
- PR 合併指標
- 30 天內沒有已合併 PR
描述
[#13 comment 1589006534](https://github.com/AdguardTeam/AGLint/issues/13#issuecomment-1589006534)
[#13 comment 1631258759](https://github.com/AdguardTeam/AGLint/issues/13#issuecomment-1631258759)
We should check https://github.com/tjenkinson/redos-detector
Keep in mind that regexps can occur in several places, e.g. as network rule patterns, modifier values, scriptlet parameters
貢獻指南
研究方向
Start by reading the two linked comments on issue #13 and reviewing the redos-detector project. Then trace how AGLint represents network rule patterns, modifier values, and scriptlet parameters; done means the new rule reliably detects vulnerable regexps in each applicable location.
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- typescript
- 領域
- security, tooling
- Issue 類型
- 功能
- 難度
- 5/5
- 預估耗時
- 一週以上
- 活躍度
- 停滯
- 描述清晰度
- 需要釐清
- 新手友好度
- 30/100