apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-30 20:39:39 +02:00
Code Issues Projects Releases Packages Wiki Activity

new capacity bits (#67)

Browse source
This commit is contained in:
Eli Peter 2026-05-07 01:29:31 -04:00 • committed by GitHub
parent afaffc0df6
commit 7d0e7320e2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
261 changed files with 10591 additions and 231 deletions
Download patch file Download diff file Expand all files Collapse all files

9
tests/fixtures/ssti/php/unsafe_smarty_string_fetch.php vendored Normal file
View file

@ -0,0 +1,9 @@
<?php
// Unsafe: `$smarty->fetch("string:" . $src)` parses the inline template
// source via the `string:` resource prefix. Tainted $src yields SSTI.
function handler() {
$src = $_GET['template'];
$smarty = new \Smarty();
return $smarty->fetch("string:" . $src);
}