dimastopel / certdepot

Create your self-signed SSL certificate instantly and for free
http://www.cert-depot.com/
31 stars 11 forks source link

Secure user inputs. #6

Open gwae opened 11 years ago

gwae commented 11 years ago

Just try to generate a certificate named reboot ;- ) It can lead to serious problems, like the stealing of the certificates of other users, and so much more...

All the inputs must be escaped !

@ https://github.com/dimastopel/certdepot/blob/master/routes.js#L154 @ https://github.com/dimastopel/certdepot/blob/master/routes.js#L167

dimastopel commented 11 years ago

added basic escaping. thanks.