[B! regexp] sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sugyan id:sugyan

regexpã«é–¢ã™ã‚‹sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ£è¦è¡¨ç¾ã®è„†å¼±æ€§ (ReDoS) ã‚’ JavaScript ã§å¦ã¶
å…ˆæ—¥ã€ã“ã®ã‚ˆã†ãªãƒ„ã‚¤ãƒ¼ãƒˆã‚’æ›¸ã„ãŸã¨ã“ã‚ã€ã‹ãªã‚Šã®åéŸ¿ãŒã‚ã‚Šã¾ã—ãŸã€‚ JavaScript ã®æ£è¦è¡¨ç¾ã®è„†å¼±æ€§ã®ä¾‹ã§ã„ã†ã¨ã€ä¾‹ãˆã° /\s+$/ ã¯è„†å¼±æ€§ãŒã‚ã‚‹ã¨è¨€ãˆã‚‹ console.time(); /\s+$/.test(" ".repeat(65536) + "a"); console.timeEnd(); çµæ§‹æ™‚é–“ãŒã‹ã‹ã‚‹ã®ãŒã‚ã‹ã‚‹ã€‚ã§ã‚‚ /\s+$/ ã‚’è¦‹ã¦ã€Œã“ã‚Œã¯å±é™ºã ãªã€ã¨ç†è§£å‡ºæ¥ã‚‹äººã¯ãã‚“ãªã«ã„ãªã„ã€‚JavaScript ã«é™ã‚‰ãªã„ã‘ã‚Œã©ã€‚ â€” Takuo Kihira (@tkihira) February 17, 2022 ã“ã‚Œã¯ä¸€èˆ¬ã« ReDoS (Regular expression Denial of Service) ã¨å‘¼ã°ã‚Œã‚‹è„†å¼±æ€§ã§ã™ã€‚æ£ç¢ºã«ç†è§£ã™ã‚‹ã®ãŒé›£ã—ã„è„†å¼±æ€§ãªã®ã§ã€å°‘ã—è§£èª¬ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ çµè«– é•·ã„è¨˜äº‹ã«ãªã‚‹ã®ã§ã€æœ€åˆã«ã€Œã¨ã‚Šã‚ãˆãšã“ã‚Œã ã‘çŸ¥ã£
sugyan 2022/02/18
regexp
ãƒªãƒ³ã‚¯
Unicodeãƒ—ãƒãƒ‘ãƒ†ã‚£ã‚’ä½¿ã£ãŸPerlæ£è¦è¡¨ç¾ - Hatena Developer Blog
ã“ã‚“ã«ã¡ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®id:nanto_viã§ã™ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã£ã¦ã„ã‚‹ã¨ã€ã€Œå…¨è§’æ–‡å—ã¨åŠè§’æ–‡å—ã‚’çµ±ä¸€ã—ãŸã„ã€ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å…¥åŠ›ã‹ã‚‰æ¼¢å—ã‚’æŠœãå‡ºã—ãŸã„ã€ã¨ã„ã£ãŸãƒ†ã‚ã‚¹ãƒˆå‡¦ç†ã‚’è¡Œã†å ´é¢ã«ãŸã³ãŸã³éé‡ã—ã¾ã™ã€‚ã¯ã¦ãªã§ã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚µãƒ¼ãƒãƒ¼å´ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã¨ã—ã¦Perlã‚’å¤šãä½¿ã£ã¦ã„ã¾ã™ãŒã€Perlãªã‚‰ã“ã®ã‚ˆã†ãªã¨ãã«Unicodeãƒ—ãƒãƒ‘ãƒ†ã‚£ã‚’ç”¨ã„ãŸæ£è¦è¡¨ç¾ãƒ‘ã‚¿ãƒ¼ãƒ³ã§æŸ”è»Ÿãªå‡¦ç†ãŒå¯èƒ½ã§ã™ã€‚ Unicodeãƒ—ãƒãƒ‘ãƒ†ã‚£ ç¾åœ¨ã€ã»ã¨ã‚“ã©ã®ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã§æŽ¡ç”¨ã•ã‚Œã¦ã„ã‚‹æ–‡å—é›†åˆãŒUnicodeã§ã™ã€‚Unicodeã§ã¯æ–‡å—ã ã‘ã§ãªããã®æ–‡å—ã®æ§˜ã€…ãªç‰¹æ€§(ãƒ—ãƒãƒ‘ãƒ†ã‚£)ã‚‚å®šã‚ã‚‰ã‚Œã¦ãŠã‚Šã€ãƒ†ã‚ã‚¹ãƒˆå‡¦ç†ã®åŸºç¤Žæƒ…å ±ã¨ã—ã¦æ´»ç”¨ã§ãã¾ã™ã€‚ Perlæ£è¦è¡¨ç¾ã§ã®Unicodeãƒ—ãƒãƒ‘ãƒ†ã‚£ã®åˆ©ç”¨ Perlã®æ£è¦è¡¨ç¾ã§ã¯ã€\p{Property_Name=Value}ã®ã‚ˆã†
sugyan 2016/06/01
Unicode

regexp
ãƒªãƒ³ã‚¯
golang ã§æ£è¦è¡¨ç¾ã®å¿…é ˆè¦ç´ ã‚’æŠ½å‡ºã—ã¦ã¿ã‚‹ - æŠ¼ã—ã¦ãƒ€ãƒ¡ãªã‚‰ãµã¦å¯ã—ã‚
ã¯ã˜ã‚ã« ã“ã®è¨˜äº‹ã¯ Go Advent Calendar 2015 14æ—¥ã®è¨˜äº‹ã§ã™ï¼Ž æ£è¦è¡¨ç¾ã®å¿…é ˆè¦ç´ ã®æŠ½å‡ºã«ã¤ã„ã¦ãŠè©±ã—ã—ãŸã„ã¨æ€ã„ã¾ã™ï¼Žå¤å…¸çš„ãªè©±é¡Œã§ã™ã—ï¼Œé‹ã„æ–¹ã¯ golang ã¨åˆ¥ã«é–¢ä¿‚ãªã„ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿã¨æ€ã‚ã‚Œã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒï¼Œæœ€å¾Œã« Russ Cox æ°ã®ç´ æ™´ã‚‰ã—ã„è¨˜äº‹ï¼Œ Regular Expression Matching with a Trigram Index ã«ã‚‚ãµã‚ŒãŸã„ã¨æ€ã„ã¾ã™ã®ã§ï¼Œæœ€å¾Œã¾ã§ãŠã¤ãã‚ã„ãã ã•ã„ï¼Žã“ã‚Œã¯ï¼ŒGoogle Code Search ã§ä½¿ã‚ã‚ŒãŸæ£è¦è¡¨ç¾ã®ãƒžãƒƒãƒãƒ³ã‚°ã«é–¢ã™ã‚‹è¨˜äº‹ã«ãªã£ã¦ã¾ã™ï¼Ž ã“ã®è¨˜äº‹ãŒï¼ŒRuss Cox æ°ã®è¨˜äº‹ã¸ã®ã‚¤ãƒ³ãƒˆãƒã«ãªã‚Œã°å¹¸ã„ã§ã™ï¼Ž ãã‚Œï¼Œæ£è¦è¡¨ç¾ã§ã‚ã‚‹å¿…è¦ã‚ã‚Šã¾ã™ã‹ï¼Ÿ æ£è¦è¡¨ç¾ã¯æ–‡å—åˆ—ãƒžãƒƒãƒã«æ¯”ã¹ã‚‹ã¨ã©ã†ã—ã¦ã‚‚é…ã„ã§ã™ï¼Žã—ã‹ã—ï¼Œæ£è¦è¡¨ç¾ã«ã‚ˆã£ã¦ã¯æ–‡å—åˆ—ãƒžãƒƒãƒã«è½ã¨ã—è¾¼ã‚“ã§ã‹ã‚‰æ¤œç´¢ã§ãã‚‹å ´åˆã‚‚ã‚ã‚Šã¾ã™ï¼Ž æ¥µç«¯
sugyan 2015/12/14
golang

regexp
ãƒªãƒ³ã‚¯
é…ã„ãƒƒï¼é…ã™ãŽã‚‹ãƒƒï¼Java ã®æ£è¦è¡¨ç¾ã®ãŠè©±ã€‚ - Cybozu Inside Out | ã‚µã‚¤ãƒœã‚¦ã‚ºã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢é–‹ç™ºãƒãƒ¼ãƒ ã®é’æœ¨ã§ã™ã€‚ å…ˆæ—¥ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼ãŒå¿œç”ã‚’è¿”ã•ãªããªã‚‹ãƒˆãƒ©ãƒ–ãƒ«ã«éé‡ã—ã¾ã—ãŸã€‚ ä»Šå›žã¯ãã®æ™‚ã®ãƒˆãƒ©ãƒ–ãƒ«ã®åŽŸå› ã¨å¯¾ç–ã®é¡›æœ«ã«ã¤ã„ã¦ãŠè©±ã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ç¾è±¡ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼ãŒçªå¦‚å¿œç”ã‚’è¿”ã•ãªããªã‚Šã¾ã—ãŸã€‚ ç¾è±¡ãŒç™ºç”Ÿã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼ã®ã‚¹ã‚¿ãƒƒã‚¯ãƒˆãƒ¬ãƒ¼ã‚¹ã‚’è¦‹ã‚‹ã¨ã€ã‚ã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã®å…ˆé ãŒä¸Šè¨˜ã®ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ "qtp258153142-514386" prio=10 tid=0x00007f40b8dbf000 nid=0x7b4e runnable [0x00007f415ccb0000] java.lang.Thread.State: RUNNABLE at java.util.regex.Pattern$Loop.match(Pattern.java:4692) at java.util.regex.Pattern$G
sugyan 2015/05/12
regexp
ãƒªãƒ³ã‚¯
RegExr: Learn, Build, & Test RegEx
RegExr is an online tool to learn, build, & test Regular Expressions (RegEx / RegExp). Supports JavaScript & PHP/PCRE RegEx. Results update in real-time as you type. Roll over a match or expression for details. Validate patterns with suites of Tests. Save & share expressions with others. Use Tools to explore your results. Full RegEx Reference with help & examples. Undo & Redo with {{getCtrlKey()}}
sugyan 2014/04/07
regexp

webservice
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ ã¨ $ ã§ã¯ãªã \A ã¨ \z ã‚’ä½¿ãŠã†
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç‰ã§ã€å®Œå…¨ä¸€è‡´ã‚’ç¤ºã™ç›®çš„ã§ ^ ã¨ $ ã‚’ç”¨ã„ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€æ£ã—ãã¯ \A ã¨ \z ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚Rubyã®å ´åˆ ^ ã¨ $ ã‚’ä½¿ã£ã¦å®Œå…¨ä¸€è‡´ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã¨è„†å¼±æ€§ãŒå…¥ã‚Šã‚„ã™ã„ãƒ¯ãƒŠã¨ãªã‚Šã¾ã™ã€‚Perlã‚„PHPã®å ´åˆã¯ã€Rubyç¨‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒä¸å…·åˆãŒç”Ÿã˜ã‚‹ã®ã§ \A ã¨ \z ã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHPerå‘ã‘ã€Ruby/Railsã®è½ã¨ã—ç©´ã€ã«ã¯ã€Rubyã®è½ã¨ã—ç©´ã¨ã—ã¦ã€å®Œå…¨ä¸€è‡´æ¤œç´¢ã®æŒ‡å®šã¨ã—ã¦ã€æ£è¦è¡¨ç¾ã® ^ ã¨ $ ã‚’æŒ‡å®šã™ã‚‹ä¾‹ãŒã€Ruby on Rails Security Guideã‹ã‚‰ã®å¼•ç”¨ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã®æ£è¦è¡¨ç¾ã¯ã€XSSå¯¾ç–ã¨ã—ã¦ã€httpã‚¹ã‚ãƒ¼ãƒ ã‚ã‚‹ã„ã¯httpsã‚¹ã‚ãƒ¼ãƒ ã®URLã®ã¿ã‚’è¨±å¯ã™ã‚‹æ£è¦è¡¨ç¾ã®ã¤ã‚‚ã‚Šã§ã™ã€‚ /^https?:\/\/[^\n]+$/
sugyan 2014/03/04
validation

security

regexp
ãƒªãƒ³ã‚¯
ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã«ãŠã‘ã‚‹æ£è¦è¡¨ç¾ãƒªãƒ†ãƒ©ãƒ«ã®å¿…è¦æ€§ã«ã¤ã„ã¦
Twitterã«æ›¸ã„ãŸã“ã¨ã®ã¾ã¨ã‚ã§ã™ã€‚ ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã®ä»•æ§˜ã®ä¸€éƒ¨ã¨ã—ã¦æ£è¦è¡¨ç¾ãƒªãƒ†ãƒ©ãƒ«ã‚’æä¾›ã™ã‚‹ã“ã¨ã®å¾—å¤±ã«ã¤ã„ã¦ã€JavaScriptã‚’ä¾‹ã«èª¬æ˜Žã—ã¾ã™ã€‚ â– ã‚ˆã‚Šç°¡æ½”ãªã‚³ãƒ¼ãƒ‰ è¨€ã†ã¾ã§ã‚‚ã‚ã‚Šã¾ã›ã‚“ãŒã€æ£è¦è¡¨ç¾ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½¿ã£ãŸæ–¹ãŒç°¡æ½”ãªã‚³ãƒ¼ãƒ‰ã«ãªã‚Šã¾ã™ã€‚ (new RegExp("abc")).exec(s) // ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½¿ã‚ãªã„å ´åˆ /abc/.exec(s) // ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½¿ã£ãŸå ´åˆ ã¾ãŸã€æ£è¦è¡¨ç¾ãƒªãƒ†ãƒ©ãƒ«ãŒãªã„å ´åˆã¯ã€æ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«ã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¨æ£è¦è¡¨ç¾ã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒäºŒé‡ã«å¿…è¦ã«ãªã‚‹çµæžœã€ã‚³ãƒ¼ãƒ‰ã®ä¿å®ˆæ€§ãŒä½Žä¸‹ã—ã¾ã™æ³¨1ã€‚ new RegExp("\\\\n"); // ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½¿ã‚ãªã„å ´åˆ /\\n/ // ãƒªãƒ†ãƒ©ãƒ«ã‚’ä½¿ã£ãŸå ´åˆ â– ã‚¨ãƒ©ãƒ¼æ¤œå‡ºã‚¿ã‚¤ãƒŸãƒ³ã‚° æ£è¦è¡¨ç¾ãƒªãƒ†ãƒ©ãƒ«ãŒãªã„å ´åˆã€å®Ÿéš›ã«ãã®æ£è¦è¡¨ç¾ãŒè©•ä¾¡ã•ã‚Œã‚‹ã¾ã§è¨˜è¿°ã‚¨ãƒ©ãƒ¼ã‚’æ¤œå‡ºã™ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚æ£è¦è¡¨
sugyan 2013/12/18
programming

language

regexp
ãƒªãƒ³ã‚¯
emacsã®æ£è¦è¡¨ç¾ã‚’ã‚‚ã£ã¨ä¾¿åˆ©ã«ä½¿ã† - $shibayu36->blog;
emacsã§æ£è¦è¡¨ç¾ã‚’ä½¿ã£ã¦ç½®æ›ã—ãŸã„ã¿ãŸã„ãªè¦æ±‚ã¯ãã‚Œãªã‚Šã«ã‚ã‚‹ã¨æ€ã„ã¾ã™ãŒã€ãã‚Œã‚’ã‚„ã‚ã†ã¨ã™ã‚‹ã¨emacsã®æ£è¦è¡¨ç¾ã®ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥åœ°ç„ã¿ãŸã„ãªã‚‚ã®ã«éé‡ã™ã‚‹ã“ã¨ãŒã‚ˆãã‚ã‚Šã¾ã™ã€‚ãã‚“ãªæ™‚ã«ä½¿ã„ãŸã„tipsã‚’å°‘ã—ã ã‘ç´¹ä»‹ã—ã¾ã™ã€‚ re-builderã‚’ä½¿ã† emacsã«ã¯re-builderã¨ã„ã†ã‚‚ã®ãŒã‚ã£ã¦ã€æ›¸ã„ã¦ã„ã‚‹æ£è¦è¡¨ç¾ã®ãƒžãƒƒãƒçŠ¶æ³ã‚’ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã«ãƒ—ãƒ¬ãƒ“ãƒ¥ãƒ¼ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ãƒ„ãƒ¼ãƒ«ãŒå˜åœ¨ã—ã¾ã™ã€‚M-x re-builderã—ã¦ã€ã„ã‚ã„ã‚æ›¸ã„ã¦ã¿ã‚‹ã¨ç¾åœ¨ã®ãƒžãƒƒãƒçŠ¶æ³ãŒãƒ—ãƒ¬ãƒ“ãƒ¥ãƒ¼ã•ã‚Œã¾ã™ã€‚ å®Ÿè¡Œä¸ã«C-c C-wã™ã‚Œã°ãã®æ£è¦è¡¨ç¾ã‚’ã‚³ãƒ”ãƒ¼ã§ãã€C-c C-qã§çµ‚äº†å‡ºæ¥ã¾ã™ã€‚emacsã«ã¯ã„ã‚ã„ã‚ãªæ£è¦è¡¨ç¾syntaxãŒã‚ã‚‹ã®ã§ã€C-c C-iã§åˆ‡ã‚Šæ›¿ãˆã‚‚ã§ãã¾ã™ã€‚ è©³ã—ãã¯ä»¥ä¸‹ã®è¨˜äº‹ã‚’è¦‹ã‚‹ã¨ã‚ˆã„ã§ã—ã‚‡ã†ã€‚ Emacsã®æ£è¦è¡¨ç¾ç·¨é›†ãƒ¢ãƒ¼ãƒ‰ re-builder ã¨ã‚„ã‚„ã“ã—ã„ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒ
sugyan 2013/01/15
emacs

regexp

tips
ãƒªãƒ³ã‚¯
1