search

Keukeiland / KeukNet

The source-code of the KeukNet connection web interface.
https://keuk.net/
Mozilla Public License 2.0
0 stars 0 forks source link

POSTing certain data can crash the server #27

Open fizitzfux opened 4 months ago

fizitzfux commented 4 months ago

Stack trace:

    [186.101.019.*]=>'POST /
        HTTP/2.0 Mozilla/5.0 noauth
/[CENSORED]/keuknet/index.js:118
                    req.data[k] = decodeURIComponent(v).replace(/\+/g,' ')
                                  ^
URIError: URI malformed
    at decodeURIComponent (<anonymous>)
    at /[CENSORED]/keuknet/index.js:118:35
    at Array.forEach (<anonymous>)
    at Http2ServerRequest.<anonymous> (/[CENSORED]/keuknet/index.js:115:37)
    at Http2ServerRequest.emit (node:events:514:28)
    at endReadableNT (node:internal/streams/readable:1359:12)
    at process.processTicksAndRejections (node:internal/process/task_queues:82:21)