In which languages is it a security hole to use user-supplied regular expression?
问题 Edit: tchrist has informed me that my original accusations about Perl's insecurity are unfounded. However, the question still stands. I know that in Perl, you can embed arbitrary code in a regular expression, so obviously accepting a user-supplied regex and matching it allows arbitrary code execution and is a clear security hole. But is this true for all languages that use regular expressions? Is it true for all languages that use "Perl-compatible" regular expressions? In which languages are