1 result · Feed
-
High 7.1
Protego: Exponential backtracking ReDoS in robots.txt URL wildcard matching
Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego._urlpattern._URLPattern._prepare_pattern_for_regex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so …