search

davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
316 stars 27 forks source link

weideman: include predictedComplexity in the detector opinion #63

Closed davisjam closed 5 years ago

davisjam commented 5 years ago

predictedComplexity is set if weideman thinks it has super-linear worst-case complexity It is set to one of these strings: "exponential" "polynomial" "unknown"