Skip to content

refactor: create 921160 .ra file#4497

Merged
fzipi merged 1 commit into
mainfrom
regex-assembly/921160
Mar 2, 2026
Merged

refactor: create 921160 .ra file#4497
fzipi merged 1 commit into
mainfrom
regex-assembly/921160

Conversation

@fzipi
Copy link
Copy Markdown
Member

@fzipi fzipi commented Mar 1, 2026

what

  • create regex-assembly file for rule 921160 (HTTP Header Injection via CR/LF)
  • header names flattened (with and without x- prefix) into a named sub-assembly, composed with CR/LF prefix and colon suffix via sequence
  • toolchain auto-optimizes common prefixes (e.g., re(?:fresh|mote-(?:ip|addr)), (?:set-)?cookie, x-(?:forwarded-...|...))
  • add standard "generated from regex-assembly" comment block

why

  • maintainability: .ra file makes it easy to add/remove header names
  • consistency: aligns with the ongoing effort to move rules to regex-assembly format

refs

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Mar 1, 2026

📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

Copy link
Copy Markdown
Contributor

@franbuehler franbuehler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@fzipi fzipi added this pull request to the merge queue Mar 2, 2026
Merged via the queue into main with commit c902e14 Mar 2, 2026
8 checks passed
@fzipi fzipi deleted the regex-assembly/921160 branch March 2, 2026 12:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants