Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/05/15 9:41 p.m.21 views

FOSRestBundle issue with broken validation of JSONP callbacks

Starting with FOSRestBundle 1.2 we switched to using willdurand/jsonp-callback-validator for validation of JSONP callbacks. However the change was implemented incorrectly validating the callback query param name, rather than its value. Anyone using the JSONP handler which is off by default togeth...

7.2AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder