Improper handling of non-existing files #9

Open
opened 2024-03-01 20:49:55 +01:00 by domi · 1 comment

Assuming that directory asdf doesn't actually exist:

http://localhost:1337/asdf/ -> 404 (good!)

http://localhost:1337/asdf/a -> 403 (bad!)

This has something to do with how the URL escaping works - fortunately, it's not a security issue.

Assuming that directory `asdf` doesn't actually exist: `http://localhost:1337/asdf/` -> 404 (good!) `http://localhost:1337/asdf/a` -> 403 (bad!) This has something to do with how the URL escaping works - fortunately, it's not a security issue.
Poster
Owner

changed the description

changed the description
Sign in to join this conversation.
No Label
oh Haruhi
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: laudom/http.sh#9
There is no content yet.