securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
22 stars 3 forks source link

Add new rule to detect regex denial-of-service patterns #372

Closed ericwb closed 7 months ago

ericwb commented 7 months ago

New rule that checks various functions of the re module for suspicious patterns that might cause catastrophic backtracking.

Closes: #371