Denial-of-Service (DoS)

Protego is vulnerable to a Denial-of-Service DoS. The vulnerability is due to excessive backtracking caused by translating multiple asterisks in Allow or Disallow directives into lazy regular-expression wildcards, which allows an attacker to provide a crafted robots.txt file and cause...