3 ms·
This is not actually a big problem for 99.9% of web apps out there. Only CGI web apps actually need to be concerned. Anything else is pretty much sensationalism
by meowface 12y ago
This is not actually a big problem for 99.9% of web apps out there. Only CGI web apps actually need to be concerned. Anything else is pretty much sensationalism.
It absolutely is a problem for many other things, but non-CGI web apps is almost always not one of them.
- brians 12y agoSome FastCGI frameworks helpfully set up environment variables in the web app---you know, just in case you run a sub-process and want it to work the same way it would have from a CGI. See Per-Request Environment Variables at http://www.fastcgi.com/devkit/doc/fastcgi-prog-guide/ch1intro.htm http://www.fastcgi.com/devkit/doc/fastcgi-prog-guide/ch1intr... These aren't ubiquitous---but it also isn't just CGI programs that expose this vulnerability.