3 ms·
Variant of #1 that I've seen not infrequently: They set it to check a regex for `bank.com` to also allow `subdomain.bank.com`, but inadvertently also allow `b
by aaronharnly 7y ago
Variant of #1 that I've seen not infrequently:
They set it to check a regex for `bank.com` to also allow `subdomain.bank.com`, but inadvertently also allow `bank.com.evil.com`, `evilbank.com`, or similar.