Exploiting Input Sanitization for Regex Denial of Service

Efe Barlas, Xin Du, James C. Davis

Web services use server-side input sanitization to guard against harmful input. Some web services publish their sanitization logic to make their client interface more usable, e.g.,…