Skip to content

add a configurable Regex timeout subsystem to prevent DoS attacks #193

@BryanWilhite

Description

@BryanWilhite

GeneratedRegex has an overload with a matchTimeoutMilliseconds argument [📖 docs]. Consider making a call like AppDomain.CurrentDomain.SetData("REGEX_DEFAULT_MATCH_TIMEOUT", TimeSpan.FromMilliseconds(100)) when REGEX_DEFAULT_MATCH_TIMEOUT (or its equivalent) is not explicitly set.

📖 see https://learn.microsoft.com/en-us/dotnet/standard/base-types/best-practices-regex#use-time-out-values

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions