Regular Expressions Improvements

[Mzack9999]

RE2 brings x2 speed but more allocs. Some pattern cannot be compiled so we fallback to standard library

Closes #112

[dogancanbakir]

bump

[neo-by-projectdiscovery-dev]

Neo - PR Security Review

No security issues found

Highlights

• Adds RE2 regex engine for 2x performance improvement with fallback to standard library when patterns cannot be compiled
• Implements quantifier limiting (+/* → {1,100}/{0,100}) to prevent catastrophic backtracking
• Regex patterns are compiled from static fingerprints data, not user input

Hardening Notes

• Consider logging when RE2 compilation fails and fallback occurs in patterns.go:69-71 to track which patterns require stdlib regex — this helps identify potential ReDoS risks during fingerprint updates
• Add timeout configuration for regex matching operations in patterns.go:108 via context.Context to provide defense-in-depth against potential ReDoS even with quantifier limits

_{Comment @pdneo help for available commands. · Open in Neo}

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.