User:Duccio Fabbri

2017-02-22T23:44:26Z

Duccio Fabbri:

I work in IT since 1999, I am interestend in quality assurance and security issues.
Methodologies and software development lifecycle catch my eye more than systemistc and networks subjects.
I appreciate OWASP's spirit and I'd like to take part in OWASP activities.
In 2015 I contribuited extensively to the italian translation of OWASP Testing Guide.

[https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project Project OWASP Application Security Verification Standard ]

[https://www.owasp.org/index.php/Category:OWASP_Guide_Project OWASP Guide_Project]

OWASP Validation Regex Repository

2017-02-22T23:35:29Z

Duccio Fabbri: Added "_" as allowed first char in email regexp, otherwise emails like: name_surname@domain.com are not allowed. According to rfc2822 the regexp is too restrictive. Maybe it should be reviewed.

;Note: These Regexs are examples and not built for a particular Regex engine. However, the PCRE syntax is mainly used. In particular, this means that character classes do not contain meta characters which need to be escaped, except the <code>-</code> and <code>]</code> character, where it is assumed that a <code>-</code> needs not to be escaped only when it is the last character in a character class. The character class supports shortcut notations for other character classes like <code>\s</code> or <code>\w</code> which should not be used as they depend on the LOCALE environment setting in most systems.

Please carefully test the regex in your regex engine.
<pre style="overflow:scroll">
<?xml version="1.0"?>

<regex>
<name>url</name>
<pattern><![CDATA[^((((https?|ftps?|gopher|telnet|nntp)://)|(mailto:|news:))(%[0-9A-Fa-f]{2}|[-()_.!~*';/?:@&=+$,A-Za-z0-9])+)([).!';/?:,][[:blank:]])?$]]></pattern>
<description>A valid URL per the URL spec.</description>
</regex>

<regex>
<name>IP</name>
<pattern><![CDATA[^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$]]></pattern>
<description>A valid IP Address</description>
</regex>

<regex>
<name>e-mail</name>
<pattern><![CDATA[^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$]]></pattern>
<description>A valid e-mail address</description>
</regex>

<regex>
<name>safetext</name>
<pattern><![CDATA[^[a-zA-Z0-9 .-]+$]]></pattern>
<description>Lower and upper case letters and all digits</description>
</regex>

<regex>
<name>date</name>
<pattern><![CDATA[^(?:(?:(?:0?[13578]|1[02])(\/|-|\.)31)\1|(?:(?:0?[1,3-9]|1[0-2])(\/|-|\.)(?:29|30)\2))(?:(?:1[6-9]|[2-9]\d)?\d{2})$|^(?:0?2(\/|-|\.)29\3(?:(?:(?:1[6-9]|[2-9]\d)?(?:0[48]|[2468][048]|[13579][26])|(?:(?:16|[2468][048]|[3579][26])00))))$|^(?:(?:0?[1-9])|(?:1[0-2]))(\/|-|\.)(?:0?[1-9]|1\d|2[0-8])\4(?:(?:1[6-9]|[2-9]\d)?\d{2})$]]></pattern>
<description>Date in US format with support for leap years</description>
</regex>

<regex>
<name>creditcard</name>
<pattern><![CDATA[^((4\d{3})|(5[1-5]\d{2})|(6011)|(7\d{3}))-?\d{4}-?\d{4}-?\d{4}|3[4,7]\d{13}$]]></pattern>
<description>A valid credit card number</description>
</regex>

<regex>
<name>password</name>
<pattern><![CDATA[^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{4,8}$]]></pattern>
<description>4 to 8 character password requiring numbers and both lowercase and uppercase letters</description>
</regex>

<regex>
<name>complexpassword</name>
<pattern><![CDATA[^(?:(?=.*\d)(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[^A-Za-z0-9])(?=.*[a-z])|(?=.*[^A-Za-z0-9])(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[A-Z])(?=.*[^A-Za-z0-9]))(?!.*(.)\1{2,})[A-Za-z0-9!~<>,;:_=?*+#."&§%°()\|\[\]\-\$\^\@\/]{8,32}$]]></pattern>
<description>4 to 32 character password requiring at least 3 out 4 (uppercase and lowercase letters, numbers and special characters) and no more than 2 equal characters in a row</description>
</regex>

<regex>
<name>English_digitwords</name>
<pattern><![CDATA[^(zero|one|two|three|four|five|six|seven|eight|nine)$]]></pattern>
<description>The English words representing the digits 0 to 9</description>
</regex>

<regex>
<name>English_daywords</name>
<pattern><![CDATA[^(Mo|Tu|We|Th|Fr|Sa|Su)$]]></pattern>
<description>English 2 character abbreviations for the days of the week</description>
</regex>

<regex>
<name>English_monthwords</name>
<pattern><![CDATA[^(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)$]]></pattern>
<description>English 3 character abbreviations for the months</description>
</regex>

<regex>
<name>French_digitwords</name>
<pattern><![CDATA[^(z[eé]ro|un|deux|trois|quatre|cinq|six|sept|huit|neuf)$]]></pattern>
<description>The French words representing the digits 0 to 9</description>
</regex>

<regex>
<name>German_digitwords</name>
<pattern><![CDATA[^(null|eins|zwei|drei|vier|f(ue|ü)nf|sechs|sieben|acht|neun)$]]></pattern>
<description>The German words representing the digits 0 to 9</description>
</regex>

<regex>
<name>Spanish_digitwords</name>
<pattern><![CDATA[^(cero|uno|dos|tres|cuatro|cinco|seis|siete|ocho|nueve)$]]></pattern>
<description>The Spanish words representing the digits 0 to 9</description>
</regex>

<regex>
<name>US_zip</name>
<pattern><![CDATA[^\d{5}(-\d{4})?$]]></pattern>
<description>US zip code with optional dash-four</description>
</regex>

<regex>
<name>US_phone</name>
<pattern><![CDATA[^\D?(\d{3})\D?\D?(\d{3})\D?(\d{4})$]]></pattern>
<description>US phone number with or without dashes</description>
</regex>

<regex>
<name>US_state</name>
<pattern><![CDATA[^(AE|AL|AK|AP|AS|AZ|AR|CA|CO|CT|DE|DC|FM|FL|GA|GU|HI|ID|IL|IN|IA|KS|KY|LA|ME|MH|MD|MA|MI|MN|MS|MO|MP|MT|NE|NV|NH|NJ|NM|NY|NC|ND|OH|OK|OR|PW|PA|PR|RI|SC|SD|TN|TX|UT|VT|VI|VA|WA|WV|WI|WY)$]]></pattern>
<description>2 letter U.S. state abbreviations</description>
</regex>

<regex>
<name>US_ssn</name>
<pattern><![CDATA[^\d{3}-\d{2}-\d{4}$]]></pattern>
<description>9 digit U.S. social security number with dashes</description>
</regex>


</pre>

=Other Regex References=

'''Regex Library Site'''

http://regexlib.com/: A site that has a HUGE library of regular expressions and other regex resources

'''Regex Tutorial Site'''

http://www.regular-expressions.info/: A site with lots of tutorials on writing Regexs and numerous examples

'''Regex Construction Tool'''

http://www.ultrapico.com/Expresso.htm: A free regex construction tool

'''Regex Explanation Tool'''

http://rick.measham.id.au/paste/explain.pl?regex=.*: Explains in English what the supplied regex means

[[Category:OWASP Validation Project]]
[[Category:OWASP Application Security Verification Standard Project]]
[[Category:How To]]

User:Duccio Fabbri

2012-11-02T08:31:13Z

Duccio Fabbri:

I work in IT since 1999, I am interestend in quality assurance and security issues.
Methodologies and software development lifecycle catch my eye more than systemistc and networks subjects.
I appreciate OWASP's spirit and I'd like to take part in OWASP activities (as far as I can do).

[https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project Project OWASP Application Security Verification Standard ]

[https://www.owasp.org/index.php/Category:OWASP_Guide_Project OWASP Guide_Project]

User:Duccio Fabbri

2012-11-02T08:30:37Z

Duccio Fabbri:

I work in IT since 1999, I am interestend in quality assurance and security issues.
Methodologies and software development lifecycle catch my eye more than systemistc and networks subjects.
I appreciate OWASP's spirit and I'd like to take part in OWASP activities (as far as I can do).

[https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project Project OWASP Application Security Verification Standard ]
[https://www.owasp.org/index.php/Category:OWASP_Guide_Project OWASP Guide_Project]

User:Duccio Fabbri

2012-10-31T12:43:33Z

Duccio Fabbri:

I work in IT since 1999, I am interestend in quality assurance and security issues.
Methodologies and software development lifecycle catch my eye more than systemistc and networks subjects.
I appreciate OWASP's spirit and I'd like to take part in OWASP activities (as far as I can do).

[https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project Project OWASP Application Security Verification Standard ]

OWASP - User contributions [en]

User:Duccio Fabbri

OWASP Validation Regex Repository

User:Duccio Fabbri

User:Duccio Fabbri

User:Duccio Fabbri