4 ms·
That actually scares me enough to disable Swank on my laptop. Actually, to disable all localhost services that could by any stretch of the imagination execute c
by mbrock 9y ago
That actually scares me enough to disable Swank on my laptop. Actually, to disable all localhost services that could by any stretch of the imagination execute code.
Tl;dr: web sites can send requests to localhost TCP sockets despite origin restrictions using a trick called DNS rebinding.
- PuercoPop 9y agoYes, it certainly a gaping security hope. Yet I cant bring myself to submit a patch