Directory traversal using "/" in issuer of NewTOTP()

sec51 / twofactor

Golang two factor authentication library

ISC License

217 stars 66 forks source link

Directory traversal using "/" in issuer of NewTOTP() #14

Open Mebus opened 6 years ago

Mebus commented 6 years ago

Hallo,

if the issuer argument of the NewTOTP() function contains a "/", the keys will be moved to a different directory and it will fail to create the subdirectories. I think this is not, what we want.

Mebus