Browse Source
This fixes an RCE vulnerability in the cookie handling. If you rely on an attacker not being able to set cookies for security, you're going to have a bad time. Also, eval(cookies) will choke on valid JSON. See http://stackoverflow.com/a/1083302windows
1 changed files with 4 additions and 4 deletions
Loading…
Reference in new issue