A deep investigation into regular expression denial of service (ReDoS) vulnerabilities in JavaScript
  • sebsch
    48·
    vor 1 Jahr

    Is there one thing not screwed up in this language? I mean it’s regex, there are so many good implementations for it.

    • philnash@programming.devOP
      5·
      vor 1 Jahr

      JavaScript’s regex engine isn’t the only one to have these problems. There certainly are other implementations, like Re2 and Rust’s implementation, that don’t have this issue. But they also lack some of the features of the JS implementation too.

      • sebsch
        14·
        vor 1 Jahr

        Ok thanks for the clarification.

        I would argue, the gold standard of regex would be perlre or even re from python. I never heard one discouraging using them. Do you know sth I don’t?

        • burntsushi@programming.devEnglish
          3·
          vor 1 Jahr

          Both Perl and Python use backtracking regex engines and are thus susceptible to similar problems as discussed in the OP.