The Regular Expression Denial of Service (ReDoS) cheat-sheet | by James Davis | Level Up Coding

What is ReDoS, and how to deal with it?

The Regular Expression Denial of Service (ReDoS) cheat-sheet James Davis 11 min read · May 23, 2020 -- 1 Listen Share Introduction This post is intended as a “technical two-pager” to summarize a security vulnerability called Regex-based Denial of Service (AKA Regex DoS , ReDoS ). There are a variety of write-ups about ReDoS, but I’m not aware of a good one-stop-shop with a higher-level treatment of all aspects of the subject. I have included links at the end to more detailed treatments. I have used headings liberally to help you navigate to your issue. What is a regular expression? A regular e

saved by

• Chris Axon

related reading

• Fast regex search: indexing text for agent tools · Cursorcursor.com
• Solving regex crosswords with Z3 - Made of Bugsblog.nelhage.com
• GitHub - google/re2: RE2 is a fast, safe, thread-friendly alternative to backtracking regular expression engines like those used in PCRE, Perl, and Python. It is a C++ library.github.com
• GitHub - kyx0r/pikevm: Russ Cox/Rob Pike pikevm regex implementationgithub.com
• Coding Models Are Doing Too Much | whnrehiew.github.io
• Regular expressions library (since C++11)en.cppreference.com
• Regular expression - Wikipediaen.wikipedia.org
• Denial-of-Service (DoS) | Computer Securitytextbook.cs161.org
• Password Regular Expression | OCPsoftocpsoft.org
• Regular Expression Matching with a Trigram Indexswtch.com
• Regular expression HOWTO — Python 3.14.6 documentationdocs.python.org
• Let’s Handle 1 Million Requests per Second, It’s Scarier Than You Think!youtube.com