Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Exploiters, start your engines.

This seems absolutely ripe for abuse, as now there's a nice string you can search for in GitHub to see where that's used as a security feature. I'm imagining things like "if URL("http://example.com/some/path").equals(URL(checkedUrl)) { return AllowEditRights }", and checkedUrl = "http://wiki.example.com/some/path" or similar.



"now"? This has been the case for more than 20 years...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: