davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
320 stars 29 forks source link

Bug: Examples at https://www.npmjs.com/package/vuln-regex-detector#example not working #81

Open thernstig opened 1 year ago

thernstig commented 1 year ago

Trying the examples at https://www.npmjs.com/package/vuln-regex-detector#example we see it take a long time (more than 2 minutes) in .testSync() and .test() throws an error with reason INVALID.

Is this expected?

image

Run in: DISTRIB_ID=Ubuntu DISTRIB_RELEASE=20.04 DISTRIB_CODENAME=focal DISTRIB_DESCRIPTION="Ubuntu 20.04.3 LTS" Node.js v18.12.1

Pranav2612000 commented 1 year ago

Encountering the same error. The Implementation Document says

This module queries a server hosted at Virginia Tech. When you use it, your regex will be shipped (via HTTPS) to the server and tested there.

So maybe the server at Virginia is down?