rspec/rules/S6444/see.adoc
Egon Okerman d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) (#3529)
* Fix all CWE references

* Fix all OWASP references

* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00

14 lines
1.5 KiB
Plaintext

== See
* OWASP - https://owasp.org/www-project-top-ten/2017/A1_2017-Injection[Top 10 2017 Category A1 - Injection]
* CWE - https://cwe.mitre.org/data/definitions/400[CWE-400 - Uncontrolled Resource Consumption]
* CWE - https://cwe.mitre.org/data/definitions/1333[CWE-1333 - Inefficient Regular Expression Complexity]
* https://www.regular-expressions.info/catastrophic.html[regular-expressions.info] - Runaway Regular Expressions: Catastrophic Backtracking
* https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS[owasp.org] - Regular expression Denial of Service - ReDoS
* CWE - https://cwe.mitre.org/data/definitions/1333[CWE-1333 - Inefficient Regular Expression Complexity]
* https://docs.microsoft.com/dotnet/standard/base-types/best-practices[docs.microsoft.com] - Best practices for regular expressions in .NET
* https://docs.microsoft.com/dotnet/standard/base-types/backtracking-in-regular-expressions[docs.microsoft.com] - Backtracking in Regular Expressions
* https://devblogs.microsoft.com/dotnet/regular-expression-improvements-in-dotnet-7/#backtracking-and-regexoptions-nonbacktracking[devblogs.microsoft.com] - Regular Expression Improvements in .NET 7: Backtracking (and RegexOptions.NonBacktracking)
* https://docs.microsoft.com/dotnet/api/system.text.regularexpressions.regex.matchtimeout[docs.microsoft.com] - Regex.MatchTimeout Property
* https://docs.microsoft.com/dotnet/api/system.text.regularexpressions.regexoptions?view=net-7.0[docs.microsoft.com] - RegexOptions Enum (NonBacktracking option)