4 ms·
This code is really not good, and certainly not worth learning from. It appears that if you request a path like "//etc/foobar" with two slashes at the front it
by evmar 13y ago
This code is really not good, and certainly not worth learning from.
It appears that if you request a path like "//etc/foobar" with two slashes at the front it'll allow traversal outside the starting directory, though it's mitigated by checking file extensions.
- JasonFruit 13y agoThat may be, but the docs are quite nice; people who can write better code might still gain from considering how they can make their documentation this instructive.