Hacker News new | ask | show | jobs
by tlrobinson 3832 days ago
Who cares about a possible directory traversal when the entire purpose of this is to run arbitrary code?

It doesn't appear to attempt to sandbox the uploaded code at all. This is obviously not meant to be exposed to untrusted parties.