News for hackers. Stuff that matters.

A comment on Sourcegraph is no longer Open Source. Parent comment

Re:Sourcegraph is no longer Open Source by progval on Tuesday July 04, 2023 @04:29PM (#36592135)
What happens if you click a link to git-peek://$(cat</etc/passwd) ?
[ Parent | on HN ]
Re:Sourcegraph is no longer Open Source by fortunateregard on Tuesday July 04, 2023 @04:48PM (#36592344)
I'm not sure. What?

Is there a reasonably legitimate reason to stop using this?

[ Parent | on HN ]
Re:Sourcegraph is no longer Open Source by ilyt on Tuesday July 04, 2023 @07:22PM (#36593753)
That's the issue here. You need to be 100% sure handler is entirely bug free or any site can redirect to that url and exploit any bug in it
[ Parent | on HN ]