endpoint: invalid URL escape sequence crashes server

aquametalabs / aquameta

Web development platform built entirely in PostgreSQL

GNU General Public License v3.0

1.1k stars 52 forks source link

endpoint: invalid URL escape sequence crashes server #250

Open erichanson opened 2 years ago

erichanson commented 2 years ago

2022/08/18 07:49:36 HTTP/1.0 GET /cgi-bin/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/%25%2532%2565%25%2532%2565/bin/sh
2022/08/18 07:49:36 invalid URL escape "%%3"