Regex DoS (ARCH8135)
Ce contenu n’est pas encore disponible dans votre langue.
Key kotlin.security.regex-dos · Severity warning · Category security · CWE CWE-1333
Flags regex literals with nested quantifiers ((a+)+, (\w*)*) that backtrack catastrophically on crafted input.
Incorrect
Section titled “Incorrect”Regex("(a+)+$")Correct
Section titled “Correct”Regex("a+$")Rewrite the pattern without nested quantifiers, or bound the input length.