arandomusernone

Results 1 issues of arandomusernone

## 问题描述 使用`toFolder`方法下载文件到某个目录时,根据服务端返回的`Content-Disposition 获取文件名会出现目录穿越漏洞。如果服务端返回的filename包含`../`,文件就会被保存到其他路径下。 When using the toFolder method to download file to a certain directory, a directory traversal vulnerability will occur when obtaining the file name based on the...

bug