Oneric a4fa2ec9af StealEmoji: make final paths infeasible to predict ... Certain attacks rely on predictable paths for their payloads. If we weren’t so overly lax in our (id, URL) check, the current counterfeit activity exploit would be one of those. It seems plausible for future attacks to hinge on or being made easier by predictable paths too. In general, letting remote actors place arbitrary data at a path within our domain of their choosing (sans prefix) just doesn’t seem like a good idea. Using fully random filenames would have worked as well, but this is less friendly for admins checking emoji dirs. The generated suffix should still be more than enough; an attacker needs on average 140 trillion attempts to correctly guess the final path.		2024-03-18 22:33:10 -01:00
..
mix	Always insert Dedupe upload filter	2024-03-18 22:33:10 -01:00
phoenix/transports/web_socket	Migrate to phoenix 1.7 (#626)	2023-08-15 10:22:18 +00:00
pleroma	StealEmoji: make final paths infeasible to predict	2024-03-18 22:33:10 -01:00