-
-
Notifications
You must be signed in to change notification settings - Fork 38
Closed
Labels
Description
The first argument (data
) of each parser can represent many things:
- topology data
- a file path
- a URL
Unfortunately this can cause different type of issues, including security issues in which an attacker can access a file on a remote machine that uses netdiff to accept network topology data through a POST
request.
It would be better to implement stricter initialization arguments, eg: data
, path
, url
.