Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://gleasonator.com/objects/82d831f9-9ae2-4ad1-8723-b1597269df65">Alex Gleason (alex@gleasonator.com)'s status on Saturday, 02-Sep-2023 04:51:09 JST</a><a href="https://gleasonator.com/users/alex" title="alex@gleasonator.com"><img src="https://gnusocial.jp/avatar/1712-48-20220726020642.webp" width="48" height="48" alt="Alex Gleason" style="position: absolute; left: 0; top: 0;">Alex Gleason</a><div><a href="https://orwell.fun/objects/a7ceff61-bb04-4715-b05e-954160845d9f" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/88912" title="deno_land@fosstodon.org">Deno</a></li></ul></div></section><article><a href="https://orwell.fun/users/tassoman">@tassoman</a> <a href="https://fosstodon.org/@deno_land">@deno_land</a> Deno themselves are fetching bare URLs in at least 24 files of their own code. I wonder how much of this is vulnerable. <a href="https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A*.ts&amp;type=code&amp;ref=advsearch">https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A*.ts&amp;type=code&amp;ref=advsearch</a></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2014045#notice-3954168">In conversation</a><time datetime="2023-09-02T04:51:09+09:00" title="Saturday, 02-Sep-2023 04:51:09 JST">about a year ago</time> <span>from <span><a href="https://gleasonator.com/objects/82d831f9-9ae2-4ad1-8723-b1597269df65" rel="external" title="Sent from gleasonator.com via ActivityPub">gleasonator.com</a></span></span><a href="https://gleasonator.com/objects/82d831f9-9ae2-4ad1-8723-b1597269df65">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A*.ts&amp;type=code&amp;ref=advsearch">https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A%2A.ts&amp;type=code&amp;ref=advsearch</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Alex Gleason (alex@gleasonator.com)'s status on Saturday, 02-Sep-2023 04:51:09 JSTAlex Gleason
in reply to
- Tassoman
- Deno
@tassoman @deno_land Deno themselves are fetching bare URLs in at least 24 files of their own code. I wonder how much of this is vulnerable. https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A*.ts&type=code&ref=advsearch
In conversationabout a year ago from gleasonator.compermalink
Attachments
1. No result found on File_thumbnail lookup.
  https://github.com/search?q=fetch%28url+user%3Adenoland+path%3A%2A.ts&type=code&ref=advsearch

Public

Embed Notice

HTML Code

Corresponding Notice