3 ms·
You might want to fix the XSS [1] on the page and prevent the path traversal (try typing ../config in download input) [1] XSS Example: http://demo.youtransfer.
by adnanh 11y ago
You might want to fix the XSS [1] on the page and prevent the path traversal (try typing ../config in download input)
[1] XSS Example: http://demo.youtransfer.io/download/%3Cscript%3Ealert(%27xss%27)%3B%3C%2Fscript%3E http://demo.youtransfer.io/download/%3Cscript%3Ealert(%27xss...
- rbolte 11y agoGood catch! The XSS error was introduced with the implementation of error handling, but is a really unwanted side effect :) I've created two issues on GitHub (https://github.com/remie/YouTransfer/issues/107 https://github.com/remie/YouTransfer/issues/107, https://github.com/remie/YouTransfer/issues/108 https://github.com/remie/YouTransfer/issues/108) which will be fixed in a new hotfix release asap.