@makenowjust-labo/redos - npm Package Compare versions

Comparing version 1.1.0 to 1.1.1

index.d.ts

@@ -29,3 +29,3 @@ /**
    *   It can analyze ReDoS vulnerability of the RegExp without false positive,
-   *   however, it needs some minutes against some RegExps and it does not support some syntax.
+   *   however, it needs some minutes against some RegExp and it does not support some syntax.
    * - `'fuzz'`: A checker based on fuzzing.
@@ -97,3 +97,3 @@ *   It can detect ReDoS vulnerability against the all RegExp syntax including back-references
   /**
-   * An integer value of a maximum size of a seed set. (default: `100`)
+   * An integer value of a maximum size of a seed set. (default: `50`)
    */
@@ -120,3 +120,3 @@ maxSeedSize?: number;
   /**
-   * An integer value of a limit of repetition count in the RegExp. (default: `10`)
+   * An integer value of a limit of repetition count in the RegExp. (default: `20`)
    *
@@ -129,3 +129,3 @@ * If the RegExp exceeds this limit on the hybrid checker, it switches to use
   /**
-   * An integer value of a maximum size of the transition function of NFA. (default: `1000`)
+   * An integer value of a maximum size of the transition function of NFA. (default: `40000`)
    *
@@ -136,2 +136,10 @@ * If the NFA's transition function exceeds this limit on the hybrid checker,
   maxNFASize?: number;
+
+  /**
+   * An integer value of maximum size of the pattern. (default: `1500`)
+   *
+   * If the pattern size exceeds this limit on the hybrid checker,
+   * it switches to use fuzz checker to analyze instead of the automaton based checker.
+   */
+  maxPatternSize?: number;
 };
@@ -155,2 +163,3 @@
   status: "safe";
+  used?: "automaton" | "fuzz";
   complexity?: Constant | Linear;
@@ -164,2 +173,3 @@ };
   status: "vulnerable";
+  used?: "automaton" | "fuzz";
   attack: string;
@@ -174,2 +184,3 @@ complexity?: Polynomial | Exponential;
   status: "unknown";
+  used?: "automaton" | "fuzz";
   error: Error;
@@ -176,0 +187,0 @@ };

package.json

@@ -8,3 +8,3 @@ {
   "repository": "https://github.com/MakeNowJust-Labo/redos.git",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "main": "redos-core-opt.js",
@@ -14,3 +14,3 @@ "types": "index.d.ts",
     "redos",
-    "regepx",
+    "regexp",
     "security",
@@ -17,0 +17,0 @@ "vulnerability"

README.md

@@ -122,3 +122,3 @@ # `@makenowjust-labo/redos`
 
-An integer value of a maximum size of a seed set. (default: `100`)
+An integer value of a maximum size of a seed set. (default: `50`)
 
@@ -139,3 +139,3 @@ #### `maxGenerationSize`
 
-An integer value of a limit of repetition count in the RegExp. (default: `10`)
+An integer value of a limit of repetition count in the RegExp. (default: `20`)
 
@@ -147,3 +147,3 @@ If the RegExp exceeds this limit on the hybrid checker, it switches to
 
-An integer value of a maximum size of the transition function of NFA. (default: `1000`)
+An integer value of a maximum size of the transition function of NFA. (default: `40000`)
 
@@ -153,2 +153,9 @@ If the NFA's transition function exceeds this limit on the hybrid checker,
 
+#### `maxPatternSize`
+
+An integer value of maximum size of the pattern. (default: `1500`)
+
+If the pattern size exceeds this limit on the hybrid checker,
+it switches to use fuzz checker to analyze instead of the automaton based checker.
+
 </details>
@@ -155,0 +162,0 @@

No alert changes

Improved metrics

Total package byte prevSize

5414621

increased by12.09%

Lines of code

5284

increased by5.96%

Number of lines in readme file

164

increased by4.46%

No dependency changes