3 ms·
Wow, this actually found a moderate security vulnerability in my website! Fetching http://mysite.com/static/ http://mysite.com/static/ returned the plaintext t
by rabidgnat 17y ago
Wow, this actually found a moderate security vulnerability in my website!
Fetching http://mysite.com/static/ http://mysite.com/static/ returned the plaintext template of my index.html file, which I must have accidentally copied in some manual hackery during a broken push (none of my scripts copy it normally)
However, I almost missed the warning: Skipfish complained because the page lacked a content type, and it was buried in several similar warnings. I'd like it to recognize potentially templated files, which is a much more serious vulnerability than missing a 'text/plain' content type. Years of staring at unimportant compiler warnings might cause people to miss gems like this.