davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
320 stars 29 forks source link

cache: server: Tool to un-trust SAFE regexes #45

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

Problem: Server may change its mind about SAFE decisions later. For example, if we add a new detector we would want to re-scan all of the SAFE decisions.

Solution: Run the db-rescan-safe.js tool on the server. This moves all SAFE docs from the trusted table to the untrusted table. validate-uploads.js will then re-test all of them.

Fixes: #43