3 ms·
And the Bridge SSRF one appears to be because someone was constructing URLs via concatenating instead of using a URL serializer / encoder. Eg https://play.rust
by Arnavion 5y ago
And the Bridge SSRF one appears to be because someone was constructing URLs via concatenating instead of using a URL serializer / encoder.
Eg https://play.rust-lang.org/?version=stable&mode=debug&edition=2018&gist=0872cc32e50b024a4c6752f5bd6787f4 https://play.rust-lang.org/?version=stable&mode=debug&editio... - A serializer not only detects characters that are completely illegal, but also escapes characters that need escaping to be legal.