Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ReCheck to CI? #602

Open
masklinn opened this issue Oct 28, 2024 · 0 comments
Open

Add ReCheck to CI? #602

masklinn opened this issue Oct 28, 2024 · 0 comments

Comments

@masklinn
Copy link
Contributor

masklinn commented Oct 28, 2024

Commit 6e65445 modified a bunch of regexes to try and implement redos mitigation, but without a lot of experience it can be hard to intuit that a regex is sensible (especially to polynomial attacks as they tend to be a bit subtle).

Since then, tools have appeared to try and find out if regexes are sensible to the issue (using both fuzzing and modelling).

https://makenowjust-labs.github.io/recheck/ is available as a javascript & scala library and should be reasonably easy to integrate into a CI script.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant