Fork me on GitHub
Slack Archive

This page is not created by, affiliated with, or supported by Slack Technologies, Inc.

2024-03-04

Channels

#aleph
<
2024-03-04
>
valerauko00:03:10

Hey, I just saw this CVE in a JS package and I wondered if this was an issue in aleph https://github.com/nodejs/undici/security/advisories/GHSA-3787-6prv-h9w3

Matthew Davidson (kingmob)10:03:15

Hmmm, maybe. We strip out the query-params on a redirect, but it doesn't look like we alter the headers.