[Zope] Regular expressions insecurity?

[Tue Wennerberg]

Toby Dickenson wrote:

 > On Friday 17 January 2003 12:11 pm, Tue Wennerberg wrote:
 >
 >> Hi
 >>
 >> Could someone please explain to me why regular expressions have been
 >> deemed insecure in ZMI development?
 >
 >
 >
 > Check the list archives. this is a FAQ.


I've searched. Still no answer.

I pretty much knew it was a FAQ (should have mentioned that). It came up 
on our local user group list twice this week. But.. I've googled, I've 
searched Zope.org and I've checked the archives for this mailing list, 
but never found an actual explanation.

I know how to get around the problem (use external method or allow 're' 
library).

What I want to know is, what specific parts of regular expressions are 
insecure?

I want to be able to convince people that it's actually a good thing 
that they're not allowed.


-- 
Mvh. Tue Wennerberg
Civilingeniør og Freelance Udvikler
http://tuewennerberg.dk/ - tue@wennerberg.dk - (+45) 4043 6735
-- 
Mvh. Tue Wennerberg
Civilingeniør og Freelance Udvikler
http://tuewennerberg.dk/ - tue@wennerberg.dk - (+45) 4043 6735