3 ms·
Is there a way to provide private feedback? There's no email address I could find on the site, or your profile here.
by stevekemp 8y ago
Is there a way to provide private feedback? There's no email address I could find on the site, or your profile here.
- stevekemp 8y agoReported via email, and now fixed. Requesting URLs such as `file:///etc/passwd` would result in viewing the contents of arbitrary files upon the host. A common security problem I've discussed in the past: https://blog.steve.fi/if_your_code_accepts_uris_as_input__.html https://blog.steve.fi/if_your_code_accepts_uris_as_input__.h...
- apexdodge 8y agoThanks again - all fixed. Code runs on an aws lambda function, but always appreciate finds like these.