2 ms·
Oddly not talked about much: In a lot of cases, if an attacker gets even limited access to the application environment, dumping the ENV variables is trivial as
by joshspankit 6y ago
Oddly not talked about much:
In a lot of cases, if an attacker gets even limited access to the application environment, dumping the ENV variables is trivial as they were never intended to be secure.
`process.env`, `printenv` (including php attacks), `ENV`, etc