davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
320 stars 29 forks source link

Integrate with regexp editors like https://regex101.com #38

Closed josdejong closed 6 years ago

josdejong commented 6 years ago

Thanks for developing vuln-regex-detector, it's essential for me as a non-regexp-expert to be able to determine whether there are security issues in my regexp's or not.

I was just thinking: it could be really powerful to integrate this service in online regexp editors like https://regex101.com/. Just an idea.

davisjam commented 6 years ago

Thanks for the suggestion. I've contacted the folks at regexbuddy. Hadn't tried regex101.com yet. Are there any other resources you use along these lines?

josdejong commented 6 years ago

:+1:

Are there any other resources you use along these lines?

Not regarding regular expressions, but I guess a simple google search will give a summary of the most popular regexp editors.

davisjam commented 6 years ago

I contacted regex101. Thanks for the suggestion.