Skip to content

Conversation

eXigentCoder
Copy link
Contributor

No description provided.

@eXigentCoder eXigentCoder requested a review from a team as a code owner September 10, 2024 18:13
let pivotPart = parts[1];
let fieldMatch;
if (type === 'pivot') {
fieldMatch = pivotPart.match(/pivot\(\[(.*?)\]/);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with 'pivot([' and with many repetitions of 'pivot([a'.
This
regular expression
that depends on
library input
may run slow on strings starting with 'pivot([' and with many repetitions of 'pivot([a'.
if (type === 'pivot') {
fieldMatch = pivotPart.match(/pivot\(\[(.*?)\]/);
} else {
fieldMatch = pivotPart.match(/unpivot\((.*?),/);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with 'unpivot(' and with many repetitions of 'unpivot(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with 'unpivot(' and with many repetitions of 'unpivot(a'.
pivotPart = ',' + pivotPart;
}
// Extract the 'for' part
const forMatch = pivotPart.match(/,(.*?),\[/);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with ',' and with many repetitions of ',a'.
This
regular expression
that depends on
library input
may run slow on strings starting with ',' and with many repetitions of ',a'.
}
pivotPart = pivotPart.replace(forMatch[0], '');
// Extract the columns
const columnsMatch = pivotPart.match(/(.*?)\]/);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings with many repetitions of 'a'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of 'a'.
@eXigentCoder eXigentCoder deleted the feat/full-outer-join branch September 11, 2024 07:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant