1. 5
    Secret fragments: Remote code execution on Symfony based websites php security ambionics.io
    jvoisin avatar via jvoisin 4 years ago |
    Archive.org Archive.today Ghostarchive
    | 1 comment
    1. 1
      yumaikas avatar yumaikas 4 years ago

      Why is arbitrary code execution (even if it’s HMAC signed), an allowed thing in Symfony based websites? Why isn’t the code to be executed whitelisted against a list of controllers or the like?

    🇬🇧 The UK geoblock is lifted, hopefully permanently.