A deep investigation into regular expression denial of service (ReDoS) vulnerabilities in JavaScript
  • sebsch@discuss.tchncs.de
    4·
    1 year ago

    Is there one thing not screwed up in this language? I mean it’s regex, there are so many good implementations for it.

    • philnash@programming.devOP
      5·
      1 year ago

      JavaScript’s regex engine isn’t the only one to have these problems. There certainly are other implementations, like Re2 and Rust’s implementation, that don’t have this issue. But they also lack some of the features of the JS implementation too.

      • sebsch@discuss.tchncs.de
        1·
        1 year ago

        Ok thanks for the clarification.

        I would argue, the gold standard of regex would be perlre or even re from python. I never heard one discouraging using them. Do you know sth I don’t?

        • burntsushi@programming.devEnglish
          3·
          1 year ago

          Both Perl and Python use backtracking regex engines and are thus susceptible to similar problems as discussed in the OP.