Skip to content

Commit 64a8609

Browse files
authored
Warn for possible ReDoS (#200)
Signed-off-by: Matteo Collina <[email protected]>
1 parent f936f93 commit 64a8609

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

README.md

+6
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,12 @@ async function subsystem (fastify, opts) {
160160
}
161161
```
162162

163+
#### :warning: potential ReDoS attacks
164+
165+
Middie use [`path-to-regexp`](http://npm.im/path-to-regexp) to convert paths to regular expressions.
166+
This might cause potential [ReDoS](https://en.wikipedia.org/wiki/ReDoS) attacks in your applications if
167+
certain patterns are used. Use it with care.
168+
163169
# Middie Engine
164170

165171
You can also use the engine itself without the Fastify plugin system.

0 commit comments

Comments
 (0)