@@ -11,5 +11,8 @@ import semmle.python.RegexTreeView
  * For javascript we make the pragmatic performance optimization to ignore files we did not extract.
  */
 predicate isExcluded(RegExpParent parent) {
-  not exists(parent.getRegex().getLocation().getFile().getRelativePath())
+  not exists(parent.getRegex().getLocation().getFile().getRelativePath()) or
+  // Regexes with many occurrences of ".*" may cause the polynomial ReDoS computation to explode, so
+  // we explicitly exclude these.
+  count(int i | exists(parent.getRegex().getText().regexpFind("\\.\\*", i, _)) | i) > 10
 }