Commit 221812f
committed
fix: replace module-name regex with str.isidentifier per-segment
Semgrep flagged the compiled regex as a potential ReDoS pattern.
Validating each dotted segment with str.isidentifier gives the
same guarantee against shell/path payloads without any regex,
removing the heuristic warning and reading more directly.1 parent 9a35074 commit 221812f
1 file changed
Lines changed: 3 additions & 4 deletions
Lines changed: 3 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
2 | 1 | | |
3 | 2 | | |
4 | 3 | | |
5 | 4 | | |
6 | 5 | | |
7 | 6 | | |
8 | | - | |
9 | | - | |
10 | 7 | | |
11 | 8 | | |
12 | | - | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
13 | 12 | | |
14 | 13 | | |
15 | 14 | | |
| |||
0 commit comments