Skip to content

fix(grouping): Bound lookaheads in parameterization regexes - #121470

Merged
oioki merged 3 commits into
masterfrom
fix/bound-parameterization-lookaheads
Aug 7, 2026
Merged

fix(grouping): Bound lookaheads in parameterization regexes#121470
oioki merged 3 commits into
masterfrom
fix/bound-parameterization-lookaheads

Conversation

@oioki

@oioki oioki commented Aug 6, 2026

Copy link
Copy Markdown
Member

No description provided.

The hostname and multi_part_random_id patterns each use an unbounded
lookahead to check for a letter/digit ahead. Bound both to the max
segment/first-part length they gate, which the pattern already enforces,
so match behavior is unchanged.

Refs VULN-2665
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@oioki
oioki requested a review from a team as a code owner August 6, 2026 18:18
Comment thread src/sentry/grouping/parameterization.py Outdated
oioki and others added 2 commits August 6, 2026 21:20
The bounded lookaheads added in 34eea24 could reject valid multi-part
random IDs whose qualifying letter or digit falls outside the chosen
window, leaving them unparameterized. Revert to the original lookaheads
to restore correct grouping behavior. The hostname fix in this branch is
unaffected and unrelated to this pattern.

Refs VULN-2665
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@github-actions github-actions Bot added the Scope: Backend Automatically applied to PRs that change backend components label Aug 7, 2026
@oioki
oioki merged commit 6850c15 into master Aug 7, 2026
117 of 119 checks passed
@oioki
oioki deleted the fix/bound-parameterization-lookaheads branch August 7, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Scope: Backend Automatically applied to PRs that change backend components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants