News for hackers. Stuff that matters.

A comment on Blog post id enumeration can lead to unwanted information disclosure. Parent comment

Re:Blog post id enumeration can lead to unwanted information... by geerlingguy on Monday February 29, 2016 @08:13AM (#11195224)
I'm fine with IDs in URLs (either redirected to a pretty URL or not); I'm suggesting that you simply make sure that unpublished content doesn't get redirected to the pretty URL so you can avoid this kind of information leakage.
[ Parent | on HN ]

There are no comments on this comment yet.