makenowjust-labs / recheck

The trustworthy ReDoS checker
https://makenowjust-labs.github.io/recheck/
MIT License
246 stars 12 forks source link

Attack string validation failed #1309

Open nisbet-hubbard opened 1 month ago

nisbet-hubbard commented 1 month ago

What is the problem?

Regex: (?:benchmark|char|exec|fopen|function|html).*(?:\(|%28).*(?:\)|%29) Generated attack string: 'char'.repeat(1217) + '('.repeat(1217)

Got message ‘Validation failed’.

How to fix the problem?

Is this to be considered a bug?

Related issues

Currently, it’s not possible to set attack string length for the automaton checker. Are there special reasons for that?