Patent ID: 11899798
Assignee: HCL TECHNOLOGIES LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 0:
1. A method of verifying at least one of a Regular Expression (regex) sanitizer and a validator in an application testing process, the method comprising:
processing, through a hardware processor, the at least one of the regex sanitizer and the validator configured for checking a tainted input in a user's input;
verifying, through the hardware processor, the at least one of the regex sanitizer and validator before checking for the tainted input through the at least one of the regex sanitizer and the validator, wherein the verifying comprises:
applying, the at least one of the regex sanitizer and the validator over multiple predefined tainted strings associated with a previously checked input received from the user;
checking, if an output obtained after applying the at least one of the regex sanitizer and the validator is one of a tainted output or a non-tainted output;
qualifying, the at least one of the regex sanitizer and the validator to be at least one of a valid regex sanitizer and a valid validator based on the checking; and
tagging each of the valid regex sanitizer and the valid validator with a validation signature, wherein the at least one of the valid regex sanitizer and the valid validator is used for checking the tainted input in the user's input;

storing each of the valid regex sanitizer and validator along with the validation signature as a previously verified valid regex sanitizer and validator, wherein the validation signature is defined according to each of the regex sanitizer and validator, a regex of the regex sanitizer and validator, a code path followed by the regex sanitizer and validator and the vulnerability type being sanitized;
tracking, if at least one of a new regex sanitizer and validator to be verified is associated with a signature;
matching the validation signature of the at least one of the valid regex sanitizer and validator with the signature associated with the at least one of the new regex sanitizer and validator to be verified in response to the tracking; and
in response to the matching of the validation signature with the signature associated with the at least one of the new regex sanitizer and validator being successful, verifying the at least one of the new regex sanitizer and validator directly as the valid regex sanitizer and validator.