- From: gaz Heyes <gazheyes@gmail.com>
- Date: Thu, 4 Mar 2010 11:17:07 +0000
- To: "public-web-security@w3.org" <public-web-security@w3.org>
Received on Thursday, 4 March 2010 11:17:42 UTC
Hi all
Thought you guys might be interested in this:-
<http://www.thespanner.co.uk/2010/03/04/my-regexp-is-still-leaking/>
To summarise:-
a=/a/;
a.test('a');
a.lastMatch;// This doesn't work but should
//RegExp.lastMatch this does work but shouldn't
And browsers should drop regular expressions being called as a function you
crazy people
Cheers
Gareth
Received on Thursday, 4 March 2010 11:17:42 UTC