send 跨站脚本漏洞

send is a pillarjs open source library for streaming files from the file system as http responses. A cross-site scripting vulnerability exists in send versions prior to 0.19.0 that stems from passing untrusted user input to SendStream.redirect to execute untrusted code...