Skip to content

此处代码用于防止CRLF注入攻击,但是代码中并没有对Hide进行赋值的点,仍然有CRLF风险 #1435

Description

@colin-si

代码中并没有对Hide进行赋值的点,仍然会默认走到第140行,会有CRLF注入攻击
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions