DU4L / CTFNote

CTFNote is a collaborative tool aiming to help CTF teams to organise their work.
GNU General Public License v3.0
0 stars 0 forks source link

Fix crash on invalid host header #61

Open frereit opened 2 years ago

frereit commented 2 years ago

This also now respects X-Forwarded-Host headers for the CTF urls.

frereit commented 2 years ago

This is still (kind-of) blocked by #75 , same issue as in TFNS/CTFNote#146

I will cherry-pick the host-header fix because it's a critical bug (as it can be abused to crash the API container) and open a new PR later or tomorrow.