Serious Security: How to stop dodgy HTTP headers clogging your website

It’s been dubbed ReDos, for Regular Expression Denial of Service – where a few rogue HTTP requests could clog your whole site.