3 ms·
Just in case you haven't seen the postmortem of the Cloudflare outage which also was caused by a regex based DoS: https://blog.cloudflare.com/details-of-the-clo
by dev_slash_null 3y ago
Just in case you haven't seen the postmortem of the Cloudflare outage which also was caused by a regex based DoS: https://blog.cloudflare.com/details-of-the-cloudflare-outage-on-july-2-2019/ https://blog.cloudflare.com/details-of-the-cloudflare-outage...
- radiojosh 3y agoThat was a great read, but there was one thing I didn't understand: Why would the regex string have "." twice in a row? What does ".." find that "." doesn't find? Does that just mean "at least two characters"?
- rjbwork 3y agoIt means specifically 2 characters, and is equivalent to .{2} ..+ or ...* are ways of writing "at least two characters".
- bn-usd-mistake 3y agoA single `.` matches exactly one character. `..` matches exactly two characters (not more, not less).