Skip to main content

New answers tagged

0 votes

How to resolve server-side request forgery (SSRF) warning for a HTTP request that takes Python package names as input?

It turns out that this was a false positive due to the py/partial-ssrf check being incorrectly written. This issue has recently been reported as resolved, and the fix will be implemented in GitHub ...
TheEponymousProgrammer's user avatar
10 votes

Securing HTTP File Transfer over local network

For security, you need authentication. If Alice wants to sends a file to Bob's computer, Alice's app needs a way to verify that it's Bob's computer it's talking to, and not an attacker's computer. So ...
Sjoerd's user avatar
  • 31.8k
4 votes

Securing HTTP File Transfer over local network

I think the appropriate answer to this would largely depend on your threat model how much effort you want to go to to make this system secure. (E.g. how much would you care if it was compromised or ...
security_paranoid's user avatar

Top 50 recent answers are included