4 ms·
Also, if you're taking in user input into a regex you want to use something like RE2 or Hyperscan. To do otherwise is to expose yourself to DoS.
by Blackthorn 9y ago
Also, if you're taking in user input into a regex you want to use something like RE2 or Hyperscan. To do otherwise is to expose yourself to DoS.
- anentropic 9y agois that just because they don't support the features which can be used to make pathological regexes in other engines? or they have additional sanitisation or security features?
- glangdale 9y agoNeither. There are regexes that can be written in the common subset supported by (say) libpcre, RE2 and Hyperscan that will induce exponential backtracking with libpcre but not with the other libraries. I'm not aware of any difference in terms of sanitisation or security.