#redos

Why your regex is slow: catastrophic backtracking explained

The reason `(a+)+b` hangs on `aaaaaaaaac` — and the five patterns that turn a 10ms validator into a 30-second ReDoS attack.