rspec/rules/S6444/description.adoc

6 lines
327 B
Plaintext
Raw Normal View History

Not specifying a timeout for regular expressions can lead to a Denial-of-Service attack.
Pass a timeout when using `System.Text.RegularExpressions` to process untrusted input because a malicious user might craft a value for which the evaluation lasts excessively long.
include::ask-yourself.adoc[]
include::recommended.adoc[]