Spatie Browsershot 安全漏洞

Spatie Browsershot is a codebase from the Belgian Spatie team that converts browser pages into PDF or image formats based on Php and Javascript. A security vulnerability exists in Spatie Browsershot versions prior to 5.0.3, which stems from improper URL validation via the setUrl method...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the...