github-advanced-security[bot] commented on code in PR #38409:
URL: https://github.com/apache/superset/pull/38409#discussion_r2911831815


##########
superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py:
##########
@@ -44,6 +45,22 @@
 
 logger = logging.getLogger(__name__)
 
+# Compiled regex for stripping common emoji Unicode ranges from tab text.
+# Uses specific Unicode blocks to avoid overly permissive ranges.
+_EMOJI_RE = re.compile(
+    "["
+    "\U0001f300-\U0001f5ff"  # Misc Symbols and Pictographs

Review Comment:
   ## Overly permissive regular expression range
   
   Suspicious character range that overlaps with \ufffd-\ufffd in the same 
character class.
   
   [Show more 
details](https://github.com/apache/superset/security/code-scanning/2267)



##########
superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py:
##########
@@ -44,6 +45,22 @@
 
 logger = logging.getLogger(__name__)
 
+# Compiled regex for stripping common emoji Unicode ranges from tab text.
+# Uses specific Unicode blocks to avoid overly permissive ranges.
+_EMOJI_RE = re.compile(
+    "["
+    "\U0001f300-\U0001f5ff"  # Misc Symbols and Pictographs

Review Comment:
   ## Overly permissive regular expression range
   
   Suspicious character range that overlaps with \ufffd-\ufffd in the same 
character class.
   
   [Show more 
details](https://github.com/apache/superset/security/code-scanning/2265)



##########
superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py:
##########
@@ -44,6 +45,22 @@
 
 logger = logging.getLogger(__name__)
 
+# Compiled regex for stripping common emoji Unicode ranges from tab text.
+# Uses specific Unicode blocks to avoid overly permissive ranges.
+_EMOJI_RE = re.compile(
+    "["
+    "\U0001f300-\U0001f5ff"  # Misc Symbols and Pictographs

Review Comment:
   ## Overly permissive regular expression range
   
   Suspicious character range that overlaps with \ufffd-\ufffd in the same 
character class.
   
   [Show more 
details](https://github.com/apache/superset/security/code-scanning/2264)



##########
superset/mcp_service/dashboard/tool/add_chart_to_existing_dashboard.py:
##########
@@ -44,6 +45,22 @@
 
 logger = logging.getLogger(__name__)
 
+# Compiled regex for stripping common emoji Unicode ranges from tab text.
+# Uses specific Unicode blocks to avoid overly permissive ranges.
+_EMOJI_RE = re.compile(
+    "["
+    "\U0001f300-\U0001f5ff"  # Misc Symbols and Pictographs

Review Comment:
   ## Overly permissive regular expression range
   
   Suspicious character range that overlaps with \ufffd-\ufffd in the same 
character class.
   
   [Show more 
details](https://github.com/apache/superset/security/code-scanning/2266)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to