Patterns longer than this are rejected outright, regardless of shape.
A generous cap: legitimate IDS/name patterns are short; this exists
as a cheap secondary control, not the primary defence (a 7-character
pattern like (a+)+$ is already catastrophic, so a length cap alone
does not save you — see hasCatastrophicBacktrackingShape).
Patterns longer than this are rejected outright, regardless of shape. A generous cap: legitimate IDS/name patterns are short; this exists as a cheap secondary control, not the primary defence (a 7-character pattern like
(a+)+$is already catastrophic, so a length cap alone does not save you — seehasCatastrophicBacktrackingShape).