Package editor: after replacing a file in a folder, the path in the URL is the absolute local path

numbas / editor

An editor for the Numbas e-learning system.

http://numbas.mathcentre.ac.uk

Apache License 2.0

59 stars 61 forks source link

Closed christianp closed 3 months ago

christianp commented 7 months ago

As well as not showing anything, this leaks information about the server's file system.

christianp commented 3 months ago

I don't think this is true any more.