Lasso 数据伪造问题漏洞

Lasso is an eBay open source Node.js-style JavaScript module bundler. The tool offers many different optimizations such as bundling, code splitting, delayed loading, conditional dependencies, and more. A security vulnerability exists in Lasso SAML, which is formed from improper privilege manageme...