FilesExpand file tree

main

/

Regex_Injection_bad.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

40 lines (29 loc) · 875 Bytes

main

/

Regex_Injection_bad.py

Copy path

Top

File metadata and controls

• Code
• Blame

40 lines (29 loc) · 875 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

from flask import request, Flask

import re

app = Flask(__name__)

@app.route("/direct")

def direct():

"""

A RemoteFlowSource is used directly as re.search's pattern

"""

unsafe_pattern = request.args["pattern"]

re.search(unsafe_pattern, "")

@app.route("/compile")

def compile():

"""

A RemoteFlowSource is used directly as re.compile's pattern

which also executes .search()

"""

unsafe_pattern = request.args["pattern"]

compiled_pattern = re.compile(unsafe_pattern)

compiled_pattern.search("")

@app.route("/compile_direct")

def compile_direct():

"""

A RemoteFlowSource is used directly as re.compile's pattern

which also executes .search() in the same line

"""

unsafe_pattern = request.args["pattern"]

re.compile(unsafe_pattern).search("")

# if __name__ == "__main__":

# app.run(debug=True)