Method node_String

aura/analyzers/python/misc.py:17–65

(self, context)

    """Various checks mostly for best-practices"""

    def node_String(self, context):
        val = str(context.node)
        entropy = calculate_entropy(val)

        if ENTROPY_THRESHOLD > 0 and entropy >= ENTROPY_THRESHOLD:
            hit = Detection(
                detection_type="HighEntropyString",
                message="A string with high shanon entropy was found",
                extra={
                    "type": "high_entropy_string",
                    "entropy": entropy,
                    "string": val,
                },
                signature=f"misc#high_entropy#{fast_checksum(val)}#{context.signature}",
                node=context.node
            )
            hit.line_no = context.node.line_no
            yield hit

        # ReDoS Detection
        # DoS attack via catastrophic regex backtracking
        # Inspired by:
        # https://github.com/dlint-py/dlint/blob/master/docs/linters/DUO138.md
        # https://github.com/dlint-py/dlint/blob/master/dlint/linters/bad_re_catastrophic_use.py

        try:
            if detect_redos.catastrophic(val):
                hit = Detection(
                    detection_type="ReDoS",
                    message = "Possible catastrophic ReDoS",
                    extra = {
                        "type": "redos",
                        "regex": val,
                    },
                    signature = f"misc#redos#{fast_checksum(val)}#{context.signature}",
                    node=context.node,
                    tags={"redos"}
                )
                yield hit
        except RecursionError:
            yield Detection(
                detection_type="Misc",
                message="Recursion limit exceeded when scanning regex pattern for ReDoS",
                extra={
                    "regex": val
                },
                signature=f"misc#redos_recursion_error#{fast_checksum(val)}#{context.signature}",
                node=context.node
            )

    def node_FunctionDef(self, context):
        if type(context.node.name) != str: