A 15-Second CPU Stall From One Unclosed XML Tag
Postmortem on a relay process that pegged a single core for fifteen seconds straight. Catastrophic regex backtracking on user-controlled input. Three-character fix, three-layer defense (bounded quantifier + per-request watchdog + nginx next_upstream).