You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jan 20, 2024. It is now read-only.
If you create a threat actor with a "/" in the name, the links to add relationships, edit, or delete don't work because the "/" is passed literally in the links causing a 404. The web server interprets the "/" as designating a directory traversal instead of being part of the object name.
Recommend sanitizing input and output for Threat Actor object names.
Thanks for a great project!
The text was updated successfully, but these errors were encountered:
If you create a threat actor with a "/" in the name, the links to add relationships, edit, or delete don't work because the "/" is passed literally in the links causing a 404. The web server interprets the "/" as designating a directory traversal instead of being part of the object name.
Recommend sanitizing input and output for Threat Actor object names.
Thanks for a great project!
The text was updated successfully, but these errors were encountered: