A deep investigation into regular expression denial of service (ReDoS) vulnerabilities in JavaScript
  • sebsch@discuss.tchncs.de
    48·
    1 年前

    Is there one thing not screwed up in this language? I mean it’s regex, there are so many good implementations for it.

    • philnash@programming.devOP
      5·
      1 年前

      JavaScript’s regex engine isn’t the only one to have these problems. There certainly are other implementations, like Re2 and Rust’s implementation, that don’t have this issue. But they also lack some of the features of the JS implementation too.

      • sebsch@discuss.tchncs.de
        14·
        1 年前

        Ok thanks for the clarification.

        I would argue, the gold standard of regex would be perlre or even re from python. I never heard one discouraging using them. Do you know sth I don’t?

        • burntsushi@programming.devEnglish
          3·
          1 年前

          Both Perl and Python use backtracking regex engines and are thus susceptible to similar problems as discussed in the OP.