undefined | Better HN

0 pointstryauuum2d ago0 comments

That's a real issue, took cloudflare down once...

0 comments

2 comments · 1 top-level

swiftcoder2d ago· 1 in thread

It's only a real issue if it is in runtime code that parses untrusted input. 99% of the regex lints/CVEs that get flagged our way are in build-time code.

tryauuumOP9h ago

I don't fully get you. Do you mean untrusted regex or untrusted data it operates on?

And to be honest, even if the regex is trusted (came from a developer) and the data as well (something predictable and structured) we are still not protected from the developer using extremely stupid regex and breaking everything

j / k navigate · click thread line to collapse