archmageirvine

SECRD ReDOS false-positve

3

I'm seeing the following: The regular expression `"^g\\s++[a-z]++(\\s++[a-z]++=[^\\s]*+)*+$"` is vulnerable to a denial of service attack (ReDOS) However, this regex is using possessive quantifiers throughout, so the matching should be...

Exercise 2.32

2

The proof here for Exercise 2.32 appears to assume P^2=P implies P is a projector. I am not certain this is true (the converse is certainly true, a projector satisfies...