jomo bba004acc7 improve URL parsing ...

uses `new URL()` and `decodeURI()` instead of `url.parse()`
also checks that the requested file is in a subdirectory of `public/` before serving the file

fixes path traversal vulnerability GHSA-5cxq-25mp-q5f2

2024-02-01 22:24:29 +01:00

..

bulk.sh

improve test script

2020-12-12 23:37:13 +01:00

test.js

improve URL parsing

2024-02-01 22:24:29 +01:00

usernames.txt

changed IGN to jomo

2015-02-04 20:15:43 +01:00

uuids.txt

improve test script

2020-12-12 23:37:13 +01:00

valid_uuids.txt

Fix Travis, closes #7

2014-11-02 11:09:07 -06:00