Conversation

@obw I think the point is: the regex is promoted as perfect, but the creator accepts it is not perfect.

The thread itself is someone breaking the regex. You just need to obfuscate the code to make it work with the parser, but it is quite trivial to do.

The real problem is: unless you create your own parser for JS (and not a regex!), you can't be sure of user input.