Feature/CVE 2024 50623

[PiranhaSa]

The provided regular expression is used to extract version information for specific software products (VLTrader, Harmony, LexiCom) from a given text or response. Here's a detailed breakdown of the pattern:

Explanation of the Regex

(?:VLTrader|Harmony|LexiCom)/
(
  (?:[0-4](?:\.\d+){0,3}) 
  | 
  5(?:\.[0-7](?:\.\d{1,2}){0,2})? 
  | 
  5\.8(?:\.0(?:\.(?:0|[1-9]|1[0-9]|2[0-1]))?)?
)
\s*\(

1 -Non-capturing group: (?:VLTrader|Harmony|LexiCom)

• The (?:...) syntax is a non-capturing group used here to match one of the product names (VLTrader, Harmony, LexiCom) without including the match in the captured output. This ensures we are only interested in capturing the version number, not the product name.

2 - Product delimiter: /

• Ensures that the version number follows the product name with a /.

3- Main capturing group:

• The (...) is a capturing group that isolates and retrieves the version number. The version format can be:

  • Versions starting with 0–4: (?:0-4{0,3})
    - Matches version numbers like 1, 3.2, 4.1.2.3.
  • Versions starting with 5 up to 5.7: 5(?:.0-7{0,2})?
    - Matches versions like 5, 5.3, 5.7.2.12.
  • Version 5.8 with finer granularity: 5.8(?:.0(?:.(?:0|[1-9]|1[0-9]|2[0-1]))?)?
    - Matches 5.8, 5.8.0, 5.8.0.21.

• The | operator ensures all these subformats are considered.
  4 - Optional whitespace and parentheses: \s*(

• Matches any optional whitespace (\s*) and ensures the version number is followed by an opening parenthesis (().

Purpose of ?:

The ?: inside the groups (e.g., (?:VLTrader|Harmony|LexiCom) and (?:0-4{0,3})) creates non-capturing groups. This allows matching specific patterns without including them in the result. In this regex, ?: ensures that only the version number is captured and returned, avoiding unwanted matches for the product name or separators.

---

Added Checks for Response Headers

In addition to checking the body of the HTTP response, checks were added to analyze the headers as well.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.82%. Comparing base (48ad0d0) to head (6f45a08).
Report is 15 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #159      +/-   ##
==========================================
+ Coverage   96.79%   96.82%   +0.02%     
==========================================
  Files         204      206       +2     
  Lines        7310     7362      +52     
==========================================
+ Hits         7076     7128      +52     
  Misses        234      234              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[ostorlab-ai-pr-review]

AI Bot Review comment

Comments fixed.