github-advanced-security[bot] commented on code in PR #71978:
URL: https://github.com/apache/airflow/pull/71978#discussion_r3836301024
##########
airflow-core/src/airflow/models/backfill.py:
##########
@@ -284,13 +308,33 @@
return non_create_reason
+def _resolve_backfill_task_ids(dag: SerializedDAG, task_id_pattern: str) ->
list[str]:
+ """
+ Resolve a task-id regex to the sorted list of matching task ids in the Dag.
+
+ :raises InvalidBackfillTaskPattern: the pattern is not a valid regular
expression.
+ :raises NoMatchingTasksForBackfill: the pattern matches no task in the Dag.
+ """
+ try:
+ pattern = re.compile(task_id_pattern)
Review Comment:
## CodeQL / Regular expression injection
This regular expression depends on a [user-provided value](1) and is
executed by [re.search](2).
This regular expression depends on a [user-provided value](3) and is
executed by [re.search](2).
[Show more
details](https://github.com/apache/airflow/security/code-scanning/635)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
