Improved messaging around file inclusion/exclusion patterns

wordfence/cli/malwarescan/definition.py

@@ -89,8 +89,8 @@
     },
     "include-files-pattern": {
         "short_name": "N",
-        "description": "PCRE regex allow pattern. Only matching filenames will"
-                       " be scanned.",
+        "description": "Python regex allow pattern. Only matching filenames "
+                       "will be scanned.",
         "context": "ALL",
         "argument_type": "OPTION_REPEATABLE",
         "default": None,
@@ -100,8 +100,8 @@
     },
     "exclude-files-pattern": {
         "short_name": "X",
-        "description": "PCRE regex deny pattern. Matching filenames will not "
-                       "be scanned.",
+        "description": "Python regex deny pattern. Matching filenames will "
+                       "not be scanned.",
         "context": "ALL",
         "argument_type": "OPTION_REPEATABLE",
         "default": None,

wordfence/cli/malwarescan/malwarescan.py

@@ -86,13 +86,25 @@ def _initialize_file_filter(self) -> filtering.FileFilter:
         if self.config.include_files_pattern is not None:
             has_include_overrides = True
             for pattern in self.config.include_files_pattern:
-                filter.add(filtering.filter_pattern(pattern))
+                try:
+                    filter.add(filtering.filter_pattern(pattern))
+                except filtering.InvalidPatternException:
+                    raise Exception(
+                            'File inclusion pattern must be a Python regex, '
+                            f'received: "{pattern}"'
+                        )
         if self.config.exclude_files is not None:
             for name in self.config.exclude_files:
                 filter.add(filtering.filter_filename(name), False)
         if self.config.exclude_files_pattern is not None:
             for pattern in self.config.exclude_files_pattern:
-                filter.add(filtering.filter_pattern(pattern), False)
+                try:
+                    filter.add(filtering.filter_pattern(pattern), False)
+                except filtering.InvalidPatternException:
+                    raise Exception(
+                            'File exclusion pattern must be a Python regex, '
+                            f'received: "{pattern}"'
+                        )
         if not has_include_overrides:
             filter.add(filtering.filter_php)
             filter.add(filtering.filter_html)

wordfence/scanning/filtering.py

@@ -98,6 +98,15 @@ def __call__(self, path: str) -> bool:
         return matches_regex(self.pattern, path)
 
 
+class InvalidPatternException(Exception):
+
+    def __init__(self, pattern: str):
+        self.pattern = pattern
+
+
 def filter_pattern(regex: str) -> Callable[[str], bool]:
-    pattern = re.compile(regex)
-    return Filter(pattern)
+    try:
+        pattern = re.compile(regex)
+        return Filter(pattern)
+    except re.error:
+        raise InvalidPatternException(regex)