News for hackers. Stuff that matters.

A comment on Zero-day in jQuery plugin sample code exploited for at least three years. Parent comment

Re:Zero-day in jQuery plugin sample code exploited for at le... by Tharre on Sunday October 21, 2018 @09:10PM (#18271415)
That's exactly what a security post-mortem should look like.

- What went wrong

- Why did it go wrong

- What can be done to ensure this doesn't happen again

Everyone makes mistakes once in a while, the key is learning from them.

Well done!

[ Parent | on HN ]
Re:Zero-day in jQuery plugin sample code exploited for at le... by blueimp on Monday October 22, 2018 @10:18AM (#18274821)
Thanks a lot!

By now I've also updated the project page with

- Security-related releases on top of the main page: https://github.com/blueimp/jQuery-File-Upload#%EF%B8%8F-secu...

- Security guidelines linked in various places on how to securely set up file uploads: https://github.com/blueimp/jQuery-File-Upload/blob/master/SE...

- A list of the fixed vulnerabilities with instructions on how to fix it for the recent critical one: https://github.com/blueimp/jQuery-File-Upload/blob/master/VU...

[ Parent | on HN ]