Perl won't let you compile regexps that contain (?{...}) or (??{...}) blocks during runtime unless you also declare use re 'eval'. That won't stop someone from giving you a regexp that's designed to run out of C stack. You could upgrade to the 5.9.3+ regexp engine which isn't recursive and is now fully reentrant to solve that second problem. There are patches against earlier versions of perl but I don't have them handy to link to. Perhaps someone else will.
⠤⠤ ⠙⠊⠕⠞⠁⠇⠑⠧⠊
In reply to Re: safe untrusted regexp
by diotalevi
in thread safe untrusted regexp
by jettero
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |