Skip to content

Instantly share code, notes, and snippets.

@saml

saml/regex dos.js

Last active January 22, 2016 22:15
Show Gist options
  • Save saml/517fbd3ef83635c763b2 to your computer and use it in GitHub Desktop.
Save saml/517fbd3ef83635c763b2 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
regex dos.js
var REGEX = /^((a)+)+$/;
function test(n) {
var input = Array(n).join('a') + 'b';
var id = 'n='+n;
console.log(input);
console.time(id);
REGEX.exec(input);
console.timeEnd(id);
}
for (var i = 1; i < 60; i++) {
test(i);
}
@saml
Copy link
Author

saml commented Jan 22, 2016

https://nodesecurity.io/advisories/53
https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS#Evil_Regexes
https://swtch.com/~rsc/regexp/regexp1.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment