- From: Anne van Kesteren <notifications@github.com>
- Date: Tue, 19 Jan 2021 05:48:01 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Tuesday, 19 January 2021 13:48:13 UTC
@johnwilander @horo-t I'm no longer convinced that safelisting this is correct as it would allow for the kind of values that might result in script execution on the server and they could potentially bypass the length checks we now have in place. Do you have thoughts on how to fix this? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/568#issuecomment-762849224
Received on Tuesday, 19 January 2021 13:48:13 UTC