News for hackers. Stuff that matters.
Re:Do not use secrets in environment variables by vundercind on Monday October 07, 2024 @02:22PM (#41769218)
That specific example? If you’ve done an amazing bad job of configuring a web server.

Similar examples that involve passing paths as e.g. query strings? When you’ve written an application that takes a real file path as a parameter and haven’t done any of several things that can prevent that from pointing to files you don’t want it to.

There are no comments on this comment yet.