Number Parsing can be susceptible to DoS attacks

Any application that takes inputs from potentially untrusted sources should be investigated in case they are susceptible to Denial of Service attacks.

I’m writing this based on some work I’ve been doing on Java based applications. The built-in code in Java for parsing numbers has subquadratic performance. Trying to parse a number with hundreds or thousands of digits can take a lot longer than you might expect. Your trusted users might be sending you …

application applications attacks case code denial of service denial of service attack doing dos expect inputs jackson java json malicious numbers parsing performance photo send service untrusted work writing yaml