Stats
- First seen
- October 2023
- Last seen
- April 2026
Description
Detects web content that abuses a regular expression optimization flaw in WebKit that can allow code execution. The rule matches a lastIndex property overridden with a custom toString function, which confuses the engine's lastIndex bookkeeping during repeated matching.