[Zope] DTML, Zope and Regex

Chris Withers chrisw@nipltd.com
Wed, 10 Jul 2002 21:25:37 +0100

Kirk Lowery wrote:
> Ben, would you mind expanding on this? What dangers are there? Regexes
> are so handy, and if I turn them on I'd like to know what the risks are...

A badly written regex can easily run in an infinite loop, hanging a thread of
your Zope server. Once the number of people who cause this regex to execute is
equal to the number of threads on your Zope server, you have a hung server ;-)