top | item 44840052

Show HN: Regolith – Regex library for TypeScript made to prevent ReDoS attacks

3 points| roggenbuck | 6 months ago |github.com

I made TypeScript bindings for the Rust Regex library to prevent Regular Expression Denial of Service attacks. Rust's Regex uses a linear-time guaranteed Regex engine (which prevents these attacks) and I wanted to bring this functionality to TypeScript as a drop-in replacement for RegExp. Many CVEs happen because TypeScript libraries are vulnerable to these types of attacks. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript.

I'm really fascinated by making programming languages safer and I would love to hear any feedback on how to improve this project. I'll try to answer all questions posted in the comments.

Thanks! - Jake

discuss

order

No comments yet.