Re:I think tumblr has a huge security hole
by tjogin on Saturday March 19, 2011 @10:46AM
(#2343700)
That wouldn't have caught this though, this code wasn't even executed, just sent as plain text.
[ Parent
| on HN ]
Nginx/varnish can also catch Content-type: text/plain (or text/php?) and treat that like a 5xx response. Yes, that's a bit of a hack, but unless tumblr needs to serve text-files (which I doubt) it's a legit safeguard.