trim the whitespace in the poly-redos examples

Author: erik-krogh

java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.qhelp

@@ -15,8 +15,7 @@
 		</p>
 
 		<sample language="java">
-			Pattern.compile("^\\s+|\\s+$").matcher(text).replaceAll("") // BAD
-		</sample>
+Pattern.compile("^\\s+|\\s+$").matcher(text).replaceAll("") // BAD</sample>
 
 		<p>
 
@@ -71,8 +70,7 @@
 		</p>
 
 		<sample language="java">
-			"^0\\.\\d+E?\\d+$"" 
-		</sample>
+"^0\\.\\d+E?\\d+$"" </sample>
 
 		<p>
 
@@ -113,8 +111,7 @@
         </p>
 
         <sample language="java">
-            Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str);
-        </sample>
+Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str); </sample>
 
         <p>
             It's not immediately obvious how to rewrite this regular expression 
@@ -124,12 +121,11 @@
         </p>
 
         <sample language="java">
-            if (str.length() &gt; 1000) {
-                throw new IllegalArgumentException("Input too long");
-            }
+if (str.length() &gt; 1000) {
+    throw new IllegalArgumentException("Input too long");
+}
 
-            Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str);
-        </sample>
+Pattern.matches("^(\\+|-)?(\\d+|(\\d*\\.\\d*))?(E|e)?([-+])?(\\d+)?$", str); </sample>
     </example>
 
 	<include src="ReDoSReferences.inc.qhelp"/>

javascript/ql/src/Performance/PolynomialReDoS.qhelp

@@ -15,8 +15,7 @@
 		</p>
 
 		<sample language="javascript">
-			text.replace(/^\s+|\s+$/g, ''); // BAD
-		</sample>
+text.replace(/^\s+|\s+$/g, ''); // BAD</sample>
 
 		<p>
 
@@ -71,8 +70,7 @@
 		</p>
 
 		<sample language="javascript">
-			/^0\.\d+E?\d+$/.test(str) // BAD
-		</sample>
+/^0\.\d+E?\d+$/.test(str) // BAD</sample>
 
 		<p>
 
@@ -113,8 +111,7 @@
         </p>
 
         <sample language="javascript">
-            /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.test(str) // BAD
-        </sample>
+/^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.test(str) // BAD</sample>
 
         <p>
             It's not immediately obvious how to rewrite this regular expression 
@@ -124,11 +121,10 @@
         </p>
 
         <sample language="javascript">
-            if (str.length &gt; 1000) {
-                throw new Error("Input too long");
-            }
-            /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.test(str)
-        </sample>
+if (str.length &gt; 1000) {
+    throw new Error("Input too long");
+}
+/^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.test(str)</sample>
     </example>
 
 	<include src="ReDoSReferences.inc.qhelp"/>

python/ql/src/Security/CWE-730/PolynomialReDoS.qhelp

@@ -15,8 +15,7 @@
 		</p>
 
 		<sample language="python">
-			re.sub(r"^\s+|\s+$", "", text) # BAD
-		</sample>
+re.sub(r"^\s+|\s+$", "", text) # BAD</sample>
 
 		<p>
 
@@ -71,8 +70,7 @@
 		</p>
 
 		<sample language="python">
-			^0\.\d+E?\d+$ # BAD
-		</sample>
+^0\.\d+E?\d+$ # BAD</sample>
 
 		<p>
 
@@ -113,8 +111,7 @@
         </p>
 
         <sample language="python">
-            match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) 
-        </sample>
+match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) </sample>
 
         <p>
             It's not immediately obvious how to rewrite this regular expression 
@@ -124,11 +121,10 @@
         </p>
 
         <sample language="python">
-            if len(str) &gt; 1000:
-                raise ValueError("Input too long")
+if len(str) &gt; 1000:
+    raise ValueError("Input too long")
 
-            match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) 
-        </sample>
+match = re.search(r'^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$', str) </sample>
     </example>
 
 	<include src="ReDoSReferences.inc.qhelp"/>

ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.qhelp

@@ -15,8 +15,7 @@
 		</p>
 
 		<sample language="ruby">
-			text.gsub!(/^\s+|\s+$/, '') # BAD
-		</sample>
+text.gsub!(/^\s+|\s+$/, '') # BAD</sample>
 
 		<p>
 
@@ -74,8 +73,7 @@
 		</p>
 
 		<sample language="ruby">
-			/^0\.\d+E?\d+$/ # BAD
-		</sample>
+/^0\.\d+E?\d+$/ # BAD</sample>
 
 		<p>
 
@@ -118,8 +116,7 @@
         </p>
 
         <sample language="ruby">
-            is_matching = /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.match?(str)
-        </sample>
+is_matching = /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.match?(str)</sample>
 
         <p>
             It's not immediately obvious how to rewrite this regular expression 
@@ -129,12 +126,11 @@
         </p>
 
         <sample language="ruby">
-            if str.length &gt; 1000
-                raise ArgumentError, "Input too long"
-            end
+if str.length &gt; 1000
+    raise ArgumentError, "Input too long"
+end
 
-            is_matching = /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.match?(str)
-        </sample>
+is_matching = /^(\+|-)?(\d+|(\d*\.\d*))?(E|e)?([-+])?(\d+)?$/.match?(str)</sample>
     </example>
 
 	<include src="ReDoSReferences.inc.qhelp"/>