3 ms·
There is https://github.com/monsanto/nreplds https://github.com/monsanto/nreplds but it requires some native code, and obviously isn't a solution for those on W
by aardvark179 10y ago
There is https://github.com/monsanto/nreplds https://github.com/monsanto/nreplds but it requires some native code, and obviously isn't a solution for those on Windows. I'm not sure how vulnerable nRepl is to http attacks as I don't think either of its default transports would accept or filter out http commands.
- fulafel 10y agoI'm not so sure, certainly one of the two socket protocols is vulnerable (the "tty" one) judging by what the regular repl does with '' GET /%20(println"hello") HTTP/1.0 '' and it's somewhat likely that you could get through the bencode transport too.
- l_zzie 10y agoI tried to get nrepl to accept http requests once and I couldn't make it validate anything. (But of course I'd love to see someone manage to do it...)