search

apache / brpc

brpc is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. "brpc" means "better RPC".
https://brpc.apache.org
Apache License 2.0
16.57k stars 3.98k forks source link

cpu_profiler未对URL参数做编码转义，潜在跨站脚本风险 #1273

Open martinzhou2015 opened 4 years ago

martinzhou2015 commented 4 years ago

Describe the bug (描述bug) 输入点：/src/brpc/builtin/hotspots_service.cpp#L628

const std::string* view = cntl->http_request().uri().GetQuery("view");

输出点，拼接输出到 Githubissues.

  • Githubissues is a development platform for aggregating issues.