Re: This is an important lesson in the testability of regular expressions
Seems to me like what they need is a limit or timeout on how long regex's can take - alerting and terminating if they go over.
You don't need fancy tech. What you need is not to swamp 100% CPU on huge multicore devices when you could have just said "Has this regex taken more than 10ms to execute? Then kill it and tell the admin so we don't fall over globally".