3 ms·
How “../sms” Could Bypass Authy 2-Factor Authentication
- saurik 12y agoThat rack-protection library Sinatra apparently uses is clearly wrong: how does that "protect" against directory traversal, rather than "cause" directory traversal? It essentially makes escaping not work correctly. In what scenario is this possibly a security measure?