in reply to Re: User regexps
in thread User regexps

And that's going to prevent you from danger exactly how?

There are two potential dangers when running user supplied regexes. 1) arbitrary code injection and 2) resource exhaustion. 1) is not possible by default, only if you enable use re 'eval', or use string eval (which isn't done by the OP). 2) is a more serious problem, and can be archieved with the limited of characters you propose.

Abigail

Replies are listed 'Best First'.
Re: Re: User regexps
by dd-b (Pilgrim) on Jan 14, 2004 at 18:13 UTC
    The resource exhaustion issues can be partly defended against using ulimit at the shell level, or suitable system calls. I don't actually know if there's a direct Perl interface to that; nothing in perlfunc anyway.
[reply]
[reply]

In Section Seekers of Perl Wisdom