#1 [RXXR: Regular expression denial of service (REDoS) static analysis](http://www.cs.bham.ac.uk/~hxt/research/rxxr.shtml) - "Static analysis for redos: RXXR
RXXR is a tool for statically detecting ReDoS vulnerabilities that cause regular expression matching to take an exponential amount of time, leading to the risk of a DoS attack.
RXXR stands for regular expression exponential runtime.
Given that the reg exp matchers in Java and .NET are vulnerable to redos, the intended users for RXXR include developers for these platforms who wish to write secure applications. More generally, there i…