Questions tagged [regex]

security concerns around regular expressions; using them as security-critical filters, processing user-supplied regexes, vulnerabilities in regex parsers, etc.

Regular Expressions are a common tool for pattern matching over text data. They are a very flexible and powerful tool, giving rise to a wide range of applications, but also the potential to introduce vulnerabilities into your application through the sloppy use of regexes.

22 questions
2
votes
0 answers

Can a Regex without characters [(+*{}? be dangerous?

I want to create some functionality for non dangerous regex. I want to accept only very few regex cases where it is safe to assume that they are not malicious (but still giving the user some flexibility). Is this possible avoiding the [(+*{}?…