Echo JS 0.11.0

Regolith - A JavaScript library immune to ReDoS attacks

at github.com

3 up and 0 down, posted by jake 46 days ago 3 comments

MaxArt 46 days ago. link 2 points ▲ ▼

Huh, using Rust's regex engine (without beckreferences and lookarounds) to achieve ReDoS immunity - nice idea 👍

It's incredible what the JS ecosystem can do nowadays, including seamlessly integrate other languages like that.

tracker1 46 days ago. link 2 points ▲ ▼

Yeah, Rust has a really good path to WASM for use in the JS ecosystem.  I did similar with an html sanitization library a couple years ago and it ran about 5x the speed of a similar JS library at the time.

borracciaBlu 33 days ago. link 1 point ▲ ▼

I don't get the use case...

You usually get ReDoS out of malicious regex you may have copy and paste from somewhere.

And here the solution proposed is: let use rust regex engine wraped in wasm and let's keep copy and paste poison from the net?! Is it? 

Am I missing something?

Also, this seems to work only on the BE side, aka Node.js no FE side available yet (see https://github.com/JakeRoggenbuck/regolith?tab=readme-ov-file#limitations)