daniel:// stenberg:// on Nostr: one of them claimed the fact that you can run "curl http://¹²7.0.0.1" is a ...
one of them claimed the fact that you can run "curl
http://¹²7.0.0.1"; is a vulnerability.
I insist this is IDN working as designed. However crazy it may look like.You just cannot filter URLs like that assume it will work.
Published at
2024-06-15 20:51:26Event JSON
{
"id": "2f10f167b80e2162c05385e9d2bde15a8331d059497edbe0950842b5a753f40f",
"pubkey": "783f5e8607f5b88c53c6c6a334445e79376235013841bc40db7c59eeb7b9e94b",
"created_at": 1718484686,
"kind": 1,
"tags": [
[
"e",
"41aa36ab22d630a3a7d0f9bf9f9e892d8773d191abb919cf22594e744bf6403f",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://mastodon.social/users/bagder/statuses/112622612382480576",
"activitypub"
]
],
"content": "one of them claimed the fact that you can run \"curl http://¹²7.0.0.1\" is a vulnerability.\n\nI insist this is IDN working as designed. However crazy it may look like.You just cannot filter URLs like that assume it will work.",
"sig": "6a1cfa136f238bca36dfc7425a0f560552a9f6d14177d14193e8066d58587dcef884a1d7e569dfd435bcd18713e30683419ba980bac07b83334ae2d0f4638164"
}