Skip to content

ReDoS protection #42

@gugu

Description

@gugu

Right now liqe supports regexes, which makes it dangerous to run on untrusted user's data.

Is there a possibility to utilize something like this for regex execution? https://github.com/fastify/safe-regex2?tab=readme-ov-file or https://www.npmjs.com/package/re2

I see two options how to deal with it without introducing a huge dependency:

  1. add option disableRegex in test/filter
  2. add ability to provide custom regex engine (re2) in test/filter
    Please tell if something out of these is okay for you and I'll provide a PR

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions