diff options
| author |   semarie <semarie@openbsd.org> | 2015-07-15 16:02:38 +0000 |
|---|---|---|
| committer | semarie <semarie@openbsd.org> | 2015-07-15 16:02:38 +0000 |
| commit | 6ebc1f19f436cf9490c7a50b5d27eb67c9f62173 (patch) | |
| tree | a3d2a5e0a8a4f20c5ff47ac481ef076ef8221b12 /lib | |
| parent | Send the TLS certificate and key via separate imsgs, rather than (diff) | |
| download | wireguard-openbsd-6ebc1f19f436cf9490c7a50b5d27eb67c9f62173.tar.xz wireguard-openbsd-6ebc1f19f436cf9490c7a50b5d27eb67c9f62173.zip | |
httpd don't sanitize variables before putting them in logs. It is possible for
an attacker to push arbitaries characters in logs (newline for forging entries,
or some control escaping interpreted by terminal emulator).
OK reyk@
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions