openPMD / openPMD-api

:floppy_disk: C++ & Python API for Scientific I/O
https://openpmd-api.readthedocs.io
GNU Lesser General Public License v3.0
138 stars 51 forks source link

Regexes: Sanitize user input #1624

Closed franzpoeschel closed 3 months ago

franzpoeschel commented 4 months ago

For detecting files of file-based encoding, we use Regexes and emplace user input into them. This might lead to Regex injection when the file name contains a special character, e.g. openpmd-ls simData_+10_1_%T.bp5. Fix that.