Regular Expression Denial of Service and Catastrophic Backtracking