Python/PolynomialReDoSQuery

python/ql/src/Security/CWE-730/PolynomialReDoS.ql

Author: d10c

python/ql/lib/semmle/python/security/dataflow/PolynomialReDoSQuery.qll

@@ -21,6 +21,8 @@ private module PolynomialReDoSConfig implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.(Sink).getLocation()
+    or
     result = sink.(Sink).getHighlight().getLocation()
     or
     result = sink.(Sink).getABacktrackingTerm().getLocation()