github-advanced-security[bot] commented on code in PR #38409: URL: https://github.com/apache/superset/pull/38409#discussion_r2908218854
########## superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py: ########## @@ -44,6 +45,15 @@ logger = logging.getLogger(__name__) +# Compiled regex for stripping common emoji Unicode ranges from tab text. +# Not exhaustive (omits flags, skin-tone modifiers, etc.) but sufficient for +# flexible matching of dashboard tab labels. +_EMOJI_RE = re.compile( + "[\U0001f300-\U0001f9ff\U00002600-\U000027bf\U0000fe00-\U0000fe0f" Review Comment: ## Overly permissive regular expression range Suspicious character range that overlaps with \ufffd-\ufffd in the same character class. [Show more details](https://github.com/apache/superset/security/code-scanning/2258) ########## superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py: ########## @@ -44,6 +45,15 @@ logger = logging.getLogger(__name__) +# Compiled regex for stripping common emoji Unicode ranges from tab text. +# Not exhaustive (omits flags, skin-tone modifiers, etc.) but sufficient for +# flexible matching of dashboard tab labels. +_EMOJI_RE = re.compile( + "[\U0001f300-\U0001f9ff\U00002600-\U000027bf\U0000fe00-\U0000fe0f" Review Comment: ## Overly permissive regular expression range Suspicious character range that overlaps with \ufffd-\ufffd in the same character class. [Show more details](https://github.com/apache/superset/security/code-scanning/2260) ########## superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py: ########## @@ -44,6 +45,15 @@ logger = logging.getLogger(__name__) +# Compiled regex for stripping common emoji Unicode ranges from tab text. +# Not exhaustive (omits flags, skin-tone modifiers, etc.) but sufficient for +# flexible matching of dashboard tab labels. +_EMOJI_RE = re.compile( + "[\U0001f300-\U0001f9ff\U00002600-\U000027bf\U0000fe00-\U0000fe0f" Review Comment: ## Overly permissive regular expression range Suspicious character range that overlaps with \u2702-\u27b0 in the same character class. [Show more details](https://github.com/apache/superset/security/code-scanning/2259) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
