Slava Semushin comments

Results 149 comments of


                                            Slava Semushin

[regression] A couple of issues have been closed while the puzzles are still in place

This might be related to #366 as 3 closed issues had duplicates that were created because of the bug.

[doc] BigIntegerInstantiation should mention BigDecimal

> The doc actually does mentioning BigDecimal: Yeah, I see it now! But all examples are about BigInteger.

GPG warning about signature

Unfortunately, I'm just a user who runs installer and sees this message. From my point of view, installer runs gpg (or something else that calling gpg). Also I have no...

GPG warning about signature

Ok, thank you anyway!

[major] Badge with statistics is broken and shows 0 alive, 0 total

It's working now: `207 alive, 317 total.` and badge shows `99+/99+`

Detect File Disclosure Injection with Spring's RequestMapping and prefixed redirect string

@ptamarit This example is not vulnerable to File Disclosure Injection. Original issue was about server-side redirect. The example is using client side redirect and the most dangerous thing that it...

Detect File Disclosure Injection with Spring's RequestMapping and prefixed redirect string

@h3xstream Let me know if you need my help (in case you're not familiar with Spring/Spring Boot).

Detect File Disclosure Injection with Spring's RequestMapping and prefixed redirect string

What's about covering the case of using "forward:" prefix?

Detect File Disclosure Injection with Spring's RequestMapping and prefixed redirect string

> "forward:" is only doing redirection to external URL to the same website. I don't think it can give an attacker access to more content. Actually it can. And that's...

Danger fails with "Cannot find a merge base between danger_base and danger_head"

This issue is reproduced on one of my PRs and danger doesn't work at all :(