Re:In search of the perfect URL validation regex
by pipeep on Sunday June 22, 2014 @07:54PM
(#7929605)
In node.js too. I found this out the hard way. I ended up modifying it so that it didn't work as well, but at least stopped DoSing my service:
https://github.com/PiPeep/NotVeryCleverBot/blob/coffee-rewri...
Note the commented out lines in the here-regex.
Re:In search of the perfect URL validation regex
by keeperofdakeys on Sunday June 22, 2014 @07:38PM
(#7929591)
From experience, the python re module does weird things sometimes. There is a better third-party regex module, https://pypi.python.org/pypi/regex.
Re:In search of the perfect URL validation regex
by pipeep on Sunday June 22, 2014 @07:56PM
(#7929609)
Does it use NFA?
http://swtch.com/~rsc/regexp/regexp1.html
Because the issue with the URL regex mentioned is with backtracking.
There are some examples of these pathological inputs at https://github.com/tornadoweb/tornado/blob/master/tornado/te...