davstorage.js makes wrong URLs -> fixed
if username was '?fakeparam=heyho&else=', you could give any URL parameter you want. The characters '?' is now escaped.
Showing
Please register or sign in to comment
lab.nexedi.com will be down from Thursday, 20 March 2025, 07:30:00 UTC for a duration of approximately 2 hours
if username was '?fakeparam=heyho&else=', you could give any URL parameter you want. The characters '?' is now escaped.