News for hackers. Stuff that matters.

A comment on # of days since the last alg=none JWT vulnerability. Parent comment

Re:# of days since the last alg=none JWT vulnerability by equidistant on Wednesday September 02, 2020 @06:46AM (#24351907)
I've raised a PR to rename decode() to unsafeDecode() (removing it from the public API might be a hard sell). I really have no idea why this is part of the public API.

https://github.com/auth0/node-jsonwebtoken/pull/741

[ Parent | on HN ]
Re:# of days since the last alg=none JWT vulnerability by patkai on Saturday September 05, 2020 @10:02AM (#24383597)
Please, everyone, do this more often! So simple and so powerful.
[ Parent | on HN ]