4 ms·
It wasn't known to be a security vulnerability as time.
by dralley 5y ago
It wasn't known to be a security vulnerability as time.
- dundarious 5y agoFailing to recognize it as such is not a hugely different kind of failure. Symlink attacks have been known about for a long time. I'm not castigating the devs/teams here (I don't even think the underlying security risk is that high) but any credit for speedy response should carry caaqil's significant caveat.