Validating Regular Expressions
May 21, 2007 | 8:45 amMe(1): What the heck do you think you’re doing? You are passing untrusted user input directly as a Regular Expression without validating it! The user could use it to validate anything!
Me(2): Shut up. I need to get this out as soon as possible, and I control the only input source: Engadget.bin.
Me(3): But, what if someone at Engadget decides to exploit the Regular Expression Injection security hole in your code by putting specially formatted RegExes in their post?
When you have that kinda conversation with yourself, you know you are mad.
And, btw, there is an interesting conversation going on in Paul’s blog. Join in!






