Careful What You Search For! - or, how to make a computation 20,000 times faster

Shai Berger Shai Berger
The presentation was given on 2024.07.08 at July 2024 at Datarails in Tel Aviv.

Use of regular expressions for searching and parsing text is very common, but it can be dangerous. Innocent-looking searches may turn out to be very slow on specially-crafted inputs, and if such inputs can be provided by users, that is called a REDoS vulnerability. This talk is about the causes of such slowness, possible fixes and prevention. A Hebrew version of the talk Shai gave in DjangoCon Europe 2024.