happi0
Results
3
issues of
happi0
add function "zv_remove_double_dots" to fix directory traversal
Directory traversal. Hackers can gain access to a wealth of sensitive information including configuration files.  For example, here I can read my `.bashrc` and `zaver.conf` 
Directory traversal. Hackers can gain access to a wealth of sensitive information including configuration files. For example, here I can read my `/etc/passwd` use `echo -e "GET /../../../../../etc/passwd HTTP/1.0\r\nHost: 127.0.0.1:3000\r\n\r\n"...