Toby Dickenson wrote:
On Friday 17 January 2003 12:11 pm, Tue Wennerberg wrote:
Hi
Could someone please explain to me why regular expressions have been deemed insecure in ZMI development?
Check the list archives. this is a FAQ.
I've searched. Still no answer. I pretty much knew it was a FAQ (should have mentioned that). It came up on our local user group list twice this week. But.. I've googled, I've searched Zope.org and I've checked the archives for this mailing list, but never found an actual explanation. I know how to get around the problem (use external method or allow 're' library). What I want to know is, what specific parts of regular expressions are insecure? I want to be able to convince people that it's actually a good thing that they're not allowed. -- Mvh. Tue Wennerberg Civilingeniør og Freelance Udvikler http://tuewennerberg.dk/ - tue@wennerberg.dk - (+45) 4043 6735 -- Mvh. Tue Wennerberg Civilingeniør og Freelance Udvikler http://tuewennerberg.dk/ - tue@wennerberg.dk - (+45) 4043 6735