Directory Traversal

Overview hostr is a simple web server for the current working directory. Used for hello world style web sites hosting only files in current directory structure. Watches files and integrates with LiveReload. Affected versions of the package do not filter http GET requests in javascript code,...

Directory Traversal

hostr is vulnerable to directory traversal attacks. These attacks can be conducted by sending a request using a small program with ../ in the input. The server will then serve up files outside of the intended directory. Note: These attacks cannot be conducted using cURL...