View source for Regular Expression Security Cheatsheet

= Regular Expression Security Cheatsheet =

== Introduction ==

This cheatsheet can be effectively used by security specialists and programmers to reveal unwanted constructions in regular expressions. This can cause bypass of intended validation rules.<br>
<br>

== Cheatsheet == 

Here is a link to GitHub RegEx repository:
=== [https://github.com/attackercan/regexp-security-cheatsheet https://github.com/attackercan/regexp-security-cheatsheet] ===
<br><br>

== SAST ==

In order to save time for security practitioners, Static Application Security Testing tool was written. You can use the following code to analyze all regular expressions from your project:<br>
<code>
grep -iorP "reg_\w+\s*\((\s*['\"](.*?)['\"])," * > regexp.txt && php index.php --file="./regexp.txt"
</code>

SAST can be downloaded from here:
=== [https://github.com/attackercan/regexp-security-cheatsheet/tree/master/RegexpSecurityParser https://github.com/attackercan/regexp-security-cheatsheet/tree/master/RegexpSecurityParser] ===
<br><br>

=Authors and Primary Editors=

Vladimir Ivanov<br>
[http://twitter.com/httpsonly @httpsonly]