This reminds me of a similar vulnerability in webhooks [1]. I never thought of throwing a POST request at Redis to muck with keys but I tried it just now and it

This reminds me of a similar vulnerability in webhooks [1]. I never thought of throwing a POST request at Redis to muck with keys but I tried it just now and it totally works. Geez. [1] http://blog.fanout.io/2014/01/27/how-to-safely-invoke-webhooks/ http://blog.fanout.io/2014/01/27/how-to-safely-invoke-webhoo...