You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In its current form, the regex plugin is susceptible to ReDoS (as demonstrated by me on @gnustomp's ninjabot instance). A timeout is needed for the execution of the user-provided regex.
It has been suggested that threading may be used to achieve this.
The text was updated successfully, but these errors were encountered:
@ackwell, does the current codebase use threads for the execution of plugins? Until this happens, we can't do any sleeping of thread, as all execution would halt on the main thread (which we definitely don't want).
In its current form, the regex plugin is susceptible to ReDoS (as demonstrated by me on @gnustomp's ninjabot instance). A timeout is needed for the execution of the user-provided regex.
It has been suggested that threading may be used to achieve this.
The text was updated successfully, but these errors were encountered: