3 ms·
Just a heads up that this is a potential security vulnerability because it essentially allows sites to put arbitrary files into your file system. This might ca
by chmod775 6y ago
Just a heads up that this is a potential security vulnerability because it essentially allows sites to put arbitrary files into your file system.
This might cause certain software to automatically read them (for instance to generate previews) and allow an attacker to exploit vulnerabilities in that software.
Think of an unsandboxed process generating a preview for a PDF file...
- saagarjha 6y agoIn an ideal system, that process would be sandboxed of course.