Module RegexInjection

Import path

import semmle.code.csharp.security.dataflow.RegexInjection

Imports

RegularExpressions
Remote

Provides classes representing data flow sources for remote user input.

Sanitizers

Provides classes for identifying expressions that might be sanitized.

Classes

RegexEscapeSanitizer

A call to Regex.Escape that sanitizes the user input for use in a regex.

RegexObjectCreationSink

A pattern argument to a construction of a Regex.

RemoteSource

A source of remote user input.

Sanitizer

A sanitizer for untrusted user input used to construct regular expressions.

Sink

A data flow sink for untrusted user input used to construct regular expressions.

Source

A data flow source for untrusted user input used to construct regular expressions.

TaintTrackingConfiguration

A taint-tracking configuration for untrusted user input used to construct regular expressions.