regexpdynamicpattern

Documentation

Overview

Package regexpdynamicpattern implements a Go analysis linter that flags calls to regexp compile functions whose pattern argument is not a compile-time constant string. Malformed dynamic patterns can panic in MustCompile variants, return errors in Compile variants, and, when influenced by untrusted input, allow an attacker to control pattern complexity or size.

Index

• Variables

Variables

var Analyzer = analyzerutil.New("regexpdynamicpattern", "reports regexp compile calls whose pattern is not a compile-time constant string", run)

Analyzer is the regexp-dynamic-pattern analysis pass.