AdguardTeam / AdguardTeam/AGLint

Add a new rule for detecting regexps vulnerable to ReDoS

未關閉
#181 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
feature request Priority: P4 T: Linter rule
主要語言
TypeScript
星號
71
分支
4
PR 合併指標
30 天內沒有已合併 PR

描述

[#13 comment 1589006534](https://github.com/AdguardTeam/AGLint/issues/13#issuecomment-1589006534)

[#13 comment 1631258759](https://github.com/AdguardTeam/AGLint/issues/13#issuecomment-1631258759)

We should check https://github.com/tjenkinson/redos-detector

Keep in mind that regexps can occur in several places, e.g. as network rule patterns, modifier values, scriptlet parameters

貢獻指南

開啟貢獻指南

研究方向

Start by reading the two linked comments on issue #13 and reviewing the redos-detector project. Then trace how AGLint represents network rule patterns, modifier values, and scriptlet parameters; done means the new rule reliably detects vulnerable regexps in each applicable location.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
typescript
領域
security, tooling
Issue 類型
功能
難度
5/5
預估耗時
一週以上
活躍度
停滯
描述清晰度
需要釐清
新手友好度
30/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。