4 ms·

Was just pentesting it, and have some minor result. If you are using S3 browser uploads, make sure parameters you supply to Presign do not contain \n or it can

by homakov 10y ago

Was just pentesting it, and have some minor result. If you are using S3 browser uploads, make sure parameters you supply to Presign do not contain \n or it can lead to format injection https://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html https://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthenti... Many aws SDK libs don't remove \n for you. (I hope it wasn't me who broke it lol)

buildbuildbuild 10y ago
"Was just pentesting it" ... hopefully with their permission. Be careful.
- homakov 10y ago
  It wasnt heavy pentesting, just some params jungling. No way it could cause anything :) still funny coincidence