2022-09-09 10:46:10 +02:00
|
|
|
Regular expression injections occur when the application retrieves
|
|
|
|
untrusted data and uses it as a regex to pattern match a string with it.
|
|
|
|
|
2022-11-24 09:39:27 +01:00
|
|
|
Most regular expression search engines use _backtracking_ to try all possible
|
2022-09-09 10:46:10 +02:00
|
|
|
regex execution paths when evaluating an input. Sometimes this can lead to
|
2022-11-24 09:39:27 +01:00
|
|
|
performance problems also referred to as _catastrophic backtracking_ situations.
|
2022-09-09 10:46:10 +02:00
|
|
|
|