Eldar Marcussen

Multi step process 1. Replace current references to "timeout" with more appropriately names "wait" or "delay". 2. Introduce actual timeout for connectivity/inactivity on connection. 3. Adjust command line options accordingly

Ie, if / has to be encoded as %2f the traversal should use `..%2f..%2f..%2fetc%2fpasswd` not `..%2f..%2f../etc/passwd`

Reintroducing old security flaws

1

Hello, I noticed that you reverted the security patch from in version 1.1.5, thus commit #d9f34eebffb8efb4dfe2ff8e429b97f7e16f0999 reintroduced remote code execution again. This issue has been assigned the following identifier: CVE-2018-3816...

Hi there, I noticed that this project uses a component (safer eval) which suffers from a security vulnerability, you may want to check how the presence of this vulnerability impacts...