Skip to content

fix: bound native JavaScript regex parser candidates - #1045

Merged
yashrajp22 merged 17 commits into
mainfrom
yashraj/javascript-string-boundaries-followup
Nov 10, 2026
Merged

yashrajp22 merged 17 commits into
mainfrom
yashraj/javascript-string-boundaries-followup

Conversation

@yashrajp22

@yashrajp22 yashrajp22 commented Nov 5, 2026 •

Copy link
Copy Markdown
Collaborator

Build on #1039 to keep backticks inside JavaScript matching patterns from borrowing shell boundaries from later code.

Use complete native JavaScript syntax to bound regex arguments of direct String matching calls and conservatively checked immutable string receivers. Preserve the existing fallback for executable consumers, unknown bindings, source extraction, overrides and dynamic scopes. Original source remains available to security finding checks.

This covers bounded native matching syntax. Broader callback and generated-code flows remain unsupported.

Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
Signed-off-by: yashrajbasav <yashrajbasav@nvidia.com>
@yashrajp22 yashrajp22 changed the title fix: bound plain JavaScript string parser failures fix: bound native JavaScript regex parser candidates Nov 5, 2026
@yashrajp22
yashrajp22 marked this pull request as ready for review November 10, 2026 05:42
@yashrajp22
yashrajp22 merged commit 16db7a0 into main Nov 10, 2026
6 checks passed
@yashrajp22
yashrajp22 deleted the yashraj/javascript-string-boundaries-followup branch November 10, 2026 05:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant