KarpelesLab / gopcre2 / 23745100505

66%

Build Type

push

github

Committed by MagicalTux

Commit Message

Ignore inline limit directives from patterns for safety

Inline directives like (*LIMIT_MATCH=N) in patterns are intentionally
not honored. If an attacker controls the pattern (which is the
prerequisite for a ReDoS attack), they could use inline directives to
override the safety limits set by the caller. Limits can only be
configured via the Set*Limit() API methods.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

0 of 2 new or added lines in 1 file covered. (0.0%)

1 existing line in 1 file now uncovered.

2688 of 4123 relevant lines covered (65.2%)

236.24 hits per line