Improper handling of non-existing files #9

Open
opened 2024-03-01 20:49:55 +01:00 by domi · 1 comment
Owner

Assuming that directory asdf doesn't actually exist:

http://localhost:1337/asdf/ -> 404 (good!)

http://localhost:1337/asdf/a -> 403 (bad!)

This has something to do with how the URL escaping works - fortunately, it's not a security issue.

Assuming that directory `asdf` doesn't actually exist: `http://localhost:1337/asdf/` -> 404 (good!) `http://localhost:1337/asdf/a` -> 403 (bad!) This has something to do with how the URL escaping works - fortunately, it's not a security issue.
Author
Owner

changed the description

changed the description
Sign in to join this conversation.
No labels
oh Haruhi
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: laudom/http.sh#9
No description provided.