search

cfpb / sbl-frontend

Small Business Lending Filing Application
MIT License
2 stars 1 forks source link

(Security) Integrate `recheck` for RegExps #1049

Open meissadia opened 2 weeks ago

meissadia commented 2 weeks ago
meissadia commented 2 weeks ago

Tried integrating recheck but found its execution to drastically slow page loading loading times, which would impact user experience.

Also explored only running recheck in local dev environments as a workaround that would still provide us the opportunity to catch vulnerabilities without affecting users.

Ultimately it seemed best to simply refactor and eliminate usage of dynamic regexes in favor of plain String functions.