Skip to content

Polynomial regular expression used on uncontrolled data #3959

@lmsurpre

Description

@lmsurpre

operation/fhir-operation-bulkdata/src/main/java/org/linuxforhealth/fhir/operation/bulkdata/client/BulkDataClient.java is splitting with the following regular expression //s*,//s* (twice)...it would be better to split on the comma and then trim each item.

fhir-search/src/main/java/org/linuxforhealth/fhir/search/util/SearchHelper.java does the same.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions