News for hackers. Stuff that matters.

A comment on Libxml2's "no security embargoes" policy. Parent comment

Re:Libxml2's "no security embargoes" policy by Onavo on Wednesday June 25, 2025 @06:46PM (#44382485)
Until the same library for their "isomorphic" backend..
[ Parent | on HN ]
Re:Libxml2's "no security embargoes" policy by hsbauauvhabzb on Wednesday June 25, 2025 @07:51PM (#44382895)
Server side rendering is all the rage again, so yeah it might be.
[ Parent | on HN ]
Re:Libxml2's "no security embargoes" policy by yencabulator on Thursday June 26, 2025 @05:17PM (#44391504)
Even then the usual thing about regexp DoS is that "it's possible to write a regexp that is very very slow to process", not about the text being matched.

For validation, the programmer typically controls the regexp exactly as much as they control the rest of the source code.

[ Parent | on HN ]