3 ms·
Reported via email, and now fixed. Requesting URLs such as `file:///etc/passwd` would result in viewing the contents of arbitrary files upon the host. A commo
by stevekemp 8y ago
Reported via email, and now fixed.
Requesting URLs such as `file:///etc/passwd` would result in viewing the contents of arbitrary files upon the host. A common security problem I've discussed in the past:
https://blog.steve.fi/if_your_code_accepts_uris_as_input__.html https://blog.steve.fi/if_your_code_accepts_uris_as_input__.h...
- apexdodge 8y agoThanks again - all fixed. Code runs on an aws lambda function, but always appreciate finds like these.