Found a serious security problem.

ryanb / ruby-warrior

Game written in Ruby for learning Ruby.

MIT License

3.83k stars 838 forks source link

Found a serious security problem. #89

Closed 0b01010001 closed 8 years ago

0b01010001 commented 8 years ago

I can define arbitrary methods on protected classes inside Ruby Warrior, sketchy code working just fine. Reluctant to post the details in public, because, you know. Who's maintaining the site?

rubberduck203 commented 8 years ago

This is the repository for the code project. The website is unaffiliated. I couldn't find a contact for the people running the game, but it's hosted on bloc.io and you can contact them here. mailto:hello@bloc.io

0b01010001 commented 8 years ago

Thanks. Is the sketchy code bit for their site a common implementation from here or their own thing? Haven't had time to dig into the code here much.

0b01010001 commented 8 years ago

Nevermind, thanks for the address in any case. Sorry for bringing this up in the wrong place!