3 ms·

I still think the one used by the Spanish Congress is worse. URL for legal document 162/000609: http://www.congreso.es/portal/page/portal/Congreso/Congreso/Ini

by hamoid 13y ago

I still think the one used by the Spanish Congress is worse. URL for legal document 162/000609: http://www.congreso.es/portal/page/portal/Congreso/Congreso/Iniciativas?_piref73_2148295_73_1335437_1335437.next_page=/wc/servidorCGI&CMD=VERLST&BASE=IW10&FMT=INITXDSS.fmt&DOCS=1-1&DOCORDER=FIFO&OPDEF=ADJ&QUERY=%28162%2F000609*.NDOC.%29 http://www.congreso.es/portal/page/portal/Congreso/Congreso/...

masklinn 13y ago
Legal portals are generally gasbage, here's the french one for Article L511-1 of the environmental code: http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000023491026&cidTexte=LEGITEXT000006074220 http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle...
- claudius 13y ago
  § 1353 of the BGB (German Civil Code) can be found at http://www.gesetze-im-internet.de/bgb/__1353.html http://www.gesetze-im-internet.de/bgb/__1353.html (literally ‘laws on the internet’).
  - mhd 13y ago
    So close, with minimal effort they could map that to '/bgb/1353'. It seems that dejure.org actually works that way -> http://dejure.org/gesetze/BGB/1353 http://dejure.org/gesetze/BGB/1353 seems to map to http://dejure.org/gesetze/BGB/1353.html http://dejure.org/gesetze/BGB/1353.html, but they graciously ignore any kind of file extension...
    - claudius 13y ago
      Well they already managed to get an overview/full-text at /bgb/, so I am quite happy for now…
- Jhsto 13y ago
  Legal portals are also many times vulnerable to a form of directory traversal, where you descend the URL scheme by cropping out the last slash. ie. /documents/17683/ would become /documents/. Doing the same thing for parameters can do wonders. So far I've found login portals to a few banks, teleoperators and to the parliament and military systems of my country. In addition, I've hit several FTP directories of organizations such as my state's public welfare system, which included software and documents. I sometimes report these incodents as I find them, anonymously and without contact information, since nobody never responds to these reports. tldr; Long urls can also be dangerous.

by hamoid 13y ago

masklinn 13y ago

Legal portals are generally gasbage, here's the french one for Article L511-1 of the environmental code: http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000023491026&cidTexte=LEGITEXT000006074220 http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle...

claudius 13y ago
§ 1353 of the BGB (German Civil Code) can be found at http://www.gesetze-im-internet.de/bgb/__1353.html http://www.gesetze-im-internet.de/bgb/__1353.html (literally ‘laws on the internet’).
- mhd 13y ago
  So close, with minimal effort they could map that to '/bgb/1353'. It seems that dejure.org actually works that way -> http://dejure.org/gesetze/BGB/1353 http://dejure.org/gesetze/BGB/1353 seems to map to http://dejure.org/gesetze/BGB/1353.html http://dejure.org/gesetze/BGB/1353.html, but they graciously ignore any kind of file extension...
  - claudius 13y ago
    Well they already managed to get an overview/full-text at /bgb/, so I am quite happy for now…
Jhsto 13y ago
Legal portals are also many times vulnerable to a form of directory traversal, where you descend the URL scheme by cropping out the last slash. ie. /documents/17683/ would become /documents/. Doing the same thing for parameters can do wonders. So far I've found login portals to a few banks, teleoperators and to the parliament and military systems of my country. In addition, I've hit several FTP directories of organizations such as my state's public welfare system, which included software and documents. I sometimes report these incodents as I find them, anonymously and without contact information, since nobody never responds to these reports. tldr; Long urls can also be dangerous.