Quantcast
Channel: BOT24
Viewing all articles
Browse latest Browse all 8064

Using open-uri? Check your code - you're playing with fire!

$
0
0
Ruby’s OpenURI is an easy-to-use wrapper for net/http, net/https and net/ftp. As far as I know it’s the most popular way to read URL content, make a GET request or download a file.

require "open-uri" internally patches Kernel.open leaving you one step away from remote code execution and reading local files!

more here.............http://sakurity.com/blog/2015/02/28/openuri.html

Viewing all articles
Browse latest Browse all 8064

Trending Articles