Detect catastrophic backtracking patterns in regex and provide secure alternatives.
npx skills add https://github.com/igbuend/grimbard --skill redos-anti-pattern
Please help me install this Agent Skill. Skill: redos-anti-pattern Source: https://github.com/igbuend/grimbard/tree/main/skills/redos-anti-pattern Command: npx skills add https://github.com/igbuend/grimbard --skill redos-anti-pattern
This Skill addresses the critical security vulnerability of Regular Expression Denial of Service (ReDoS), which can cause applications to hang indefinitely due to poorly crafted regular expressions processing malicious input.
Review the provided regular expression for potential ReDoS vulnerabilities.
High-intent search queries and answers about installing and using this skill.
A regular expression denial of service (ReDoS) vulnerability occurs when poorly crafted regex processes malicious input, causing exponential-time complexity through catastrophic backtracking. This makes applications hang indefinitely during input validation or parsing tasks.
To detect catastrophic backtracking in regex, analyze the regex syntax for nested quantifiers and overlapping alternations. Identifying these vulnerable patterns helps mitigate exponential-time processing risks before they can be exploited by malicious input.
To fix vulnerable regex and prevent denial of service attacks, replace exponential-time patterns with secure linear-time alternatives. You can also apply prevention strategies like input length limiting to secure your input validation and parsing logic.
Catastrophic backtracking in regex is caused by nested quantifiers and overlapping alternations within the expression syntax. When the regex engine processes ambiguous input, it tries too many matching paths, resulting in exponential-time complexity.
Secure alternatives to complex regex for input validation include using linear-time regex patterns and implementing input length limiting. These strategies prevent the exponential processing overhead that leads to denial of service vulnerabilities.
gitgoodordietryingProvide regex patterns for validation, parsing, and data extraction.
DevelopersCoffeeReplace vulnerable Java regex patterns with possessive quantifiers or atomic groups.
dtbuchholzEnforce secure coding practices and identify OWASP Top 10 vulnerabilities.
ali-masterLimit oRPC request body sizes to prevent large payload attacks.
