Hacker News new | ask | show | jobs
by l0b0 463 days ago
Nice find! As for the provider, since they missed this extremely basic step (don't trust the client!!) I would expect they have many more undiscovered vulnerabilities.