Posté par: igor51 le août 21, 2018, 21:00:06
It's been dubbed ReDos, for Regular Expression Denial of Service - where a few rogue HTTP requests could clog your whole site.
Source: Serious Security: How to stop dodgy HTTP headers clogging your website (http://feedproxy.google.com/~r/nakedsecurity/~3/SkZOE8raC-M/)