in src/main/java/org/apache/sling/clam/http/internal/RequestUtil.java [53:64]
static Pattern pattern(@NotNull final SlingHttpServletRequest request, @NotNull final Pattern defaultPattern) throws Exception {
final String value = request.getParameter("pattern"); // ensure pattern input is from trusted source, e.g. authenticated and authorized users (ClamJcrScanServlet)
if (value == null) {
return defaultPattern;
} else {
try {
return Pattern.compile(value);
} catch (Exception e) {
throw new Exception("Invalid parameter value for pattern: " + value);
}
}
}