ReDoS Vulnerabilities in JavaScript-based Web Servers