Comment

Comment by est

I am replying to ams6110. Mind the context please.

> this only works if you actally have a corresponding directory with a literal trailing space in the name

This won't work event if you have space in name because space would actually be %20. Only a carefully hand crafted HTTP packet would cause the vulnerability

parent est 13 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton