4 ms·
I also feel like this is a buffer overflow waiting to happen. If somehow someone makes the header length way longer than expected (eg. referrrrrrrrrrrrrrer).
by xmprt 5y ago
I also feel like this is a buffer overflow waiting to happen. If somehow someone makes the header length way longer than expected (eg. referrrrrrrrrrrrrrer).
- jsjohnst 5y ago? is 0 or 1 instances of the preceding character, so referrrrrrrrrrrrrrer wouldn’t match /referr?er/, only referer or referrer. Proof: https://regex101.com/r/s56ebD/1 https://regex101.com/r/s56ebD/1
- xmprt 5y agoI'm replying to the grandparent comment. I said "Also" meaning I was adding onto your comment.