Skip to content

Remove r prefix - #3

Open
jamesdoherty wants to merge 2 commits into
mainfrom
add-vuln-code
Open

Remove r prefix#3
jamesdoherty wants to merge 2 commits into
mainfrom
add-vuln-code

Conversation

@jamesdoherty

Copy link
Copy Markdown
Owner

No description provided.

Comment thread app.py
app = Flask(__name__)

UNSAFE_REGEX = re.compile(r"(www|beta)\.example\.com/")
UNSAFE_REGEX = re.compile("(www|beta).example.com/")

Check failure

Code scanning / CodeQL

Incomplete regular expression for hostnames

This regular expression has an unescaped '.' before 'example.com/', so it might match more hosts than expected.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants