Hacker News new | past | comments | ask | show | jobs | submit login

Remember when you're writing applications like this, which accept an URL, you need to filter out `file://` URIs.

Otherwise you disclose arbitrary files, like this site does.




Applications are open for YC Winter 2020

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact

Search: