NicolaasWeideman / RegexStaticAnalysis

A tool to perform static analysis on regexes to determine whether they are vulnerable to ReDoS.
MIT License
109 stars 28 forks source link

Collection of some bugs #15

Open JavanXD opened 5 years ago

JavanXD commented 5 years ago

Great project. It was exactly what I was looking for. But the very first time I used it I noticed some ambiguities.

A) Timeout miliseconds or seconds?

image

Usage is outdated:

image

B) Usage of -c or --regex to pass regex?

I think README.md is outdated.

C) User input is limited to 1022 chars

image

But could be also a problem from Terminal. Workaround: The long regex can be correctly read from a given textfile.