Beefy Boxes and Bandwidth Generously Provided by pair Networks
Don't ask to ask, just ask
 
PerlMonks  

Re^2: Is it safe to use external strings for regexes?

by stevieb (Canon)
on Oct 06, 2021 at 13:44 UTC ( #11137260=note: print w/replies, xml ) Need Help??


in reply to Re: Is it safe to use external strings for regexes?
in thread Is it safe to use external strings for regexes?

Thanks Corion, that's a good point. The regexes will only be added/edited by seasoned programmers, but I do know that many people who think they know regexes really don't.

I can definitely add in some checks in conjunction with our existing review processes, but I mostly like the idea of time-limited sub processes to handle the actual work (which can alert if something takes too long).

  • Comment on Re^2: Is it safe to use external strings for regexes?

Replies are listed 'Best First'.
Re^3: Is it safe to use external strings for regexes?
by Fletch (Chancellor) on Oct 06, 2021 at 17:26 UTC

    It was discussed here in Cloudflare blames PCRE for outage and a blog at cloudflare but they found out a couple years ago even "seasoned programmers" can shoot themselves in the foot as well.

    The cake is a lie.
    The cake is a lie.
    The cake is a lie.

      even "seasoned programmers" can shoot themselves in the foot as well.

      Yep, been there, done that myself once or twice. It's especially easy to shoot one's self in the foot when carrying a fully loaded automatic with one hand while not having trigger discipline (ie. a complex regex).

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://11137260]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chanting in the Monastery: (3)
As of 2022-01-22 00:42 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    In 2022, my preferred method to securely store passwords is:












    Results (60 votes). Check out past polls.

    Notices?