search

davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
320 stars 29 forks source link

cache #11

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

The detectors are slow. Once we've tested a regex we don't need to test it again. Can we cache the results?

NB Could be local but unfriendly to Travis/CI type clients.

davisjam commented 6 years ago

I am working on this

davisjam commented 6 years ago

See the Cache branch. Nearly ready to merge.

davisjam commented 6 years ago

The implementation won't use a local cache. It hits a server to check if the answer for a given regex is already known.

davisjam commented 6 years ago

Addressed in #14 and #15.