rundevelopment

rundevelopment/scslre

A library to find JS RegExp with super-linear worst-case time complexity for attack strings that repeat a single character.

TypeScript
1
1
MIT License

This library statically analyzes JavaScript regular expressions to detect super-linear worst-case time complexity, specifically targeting patterns that can be exploited via ReDoS attacks using single-character repeated attack strings. It's designed as a lightweight, supplementary analysis tool for developers who need to quickly identify potentially dangerous regex patterns without performing full static analysis, particularly useful when working with backreferences and assertions where traditional analysis methods may fall short.

Total donated
Undistributed
Share with your subscribers:

Recipients

How the donated funds are distributed

Support the dependencies

Support the repos that depend on this repository

Top contributors

RunDevelopment's profile
RunDevelopment
47 contributions
makenowjust's profile
makenowjust
1 contributions
dependabot[bot]'s profile
dependabot[bot]
1 contributions

Recent events

Kivach works on the Obyte network, and therefore you can track all donations.

No events yet