-
Notifications
You must be signed in to change notification settings - Fork 22
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
483366f
commit f22dc6d
Showing
3 changed files
with
89 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
--- | ||
name: Bug report | ||
about: Create a report to help us improve | ||
title: "[BUG] " | ||
labels: bug | ||
assignees: patrickhener | ||
|
||
--- | ||
|
||
**Describe the bug** | ||
A clear and concise description of what the bug is. | ||
|
||
**To Reproduce** | ||
Steps to reproduce the behavior: | ||
1. Start goshs with command `goshs ...` | ||
2. Browse to `http://localhost:8000/...` | ||
3. Do this and that | ||
4. See error | ||
|
||
**Expected behavior** | ||
A clear and concise description of what you expected to happen. | ||
|
||
**Screenshots** | ||
If applicable, add screenshots to help explain your problem. | ||
|
||
**Desktop (please complete the following information):** | ||
- OS: [e.g. macOS] | ||
- goshs version [e.g. 1.0.0] | ||
- Browser [e.g. chrome, safari, firefox] | ||
- Browser version [e.g. 22] | ||
|
||
**Additional context** | ||
Add any other context about the problem here. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,20 @@ | ||
--- | ||
name: Feature request | ||
about: Suggest an idea for this project | ||
title: "[FEATURE] " | ||
labels: enhancement | ||
assignees: patrickhener | ||
|
||
--- | ||
|
||
**Is your feature request related to a problem? Please describe.** | ||
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] | ||
|
||
**Describe the solution you'd like** | ||
A clear and concise description of what you want to happen. | ||
|
||
**Describe alternatives you've considered** | ||
A clear and concise description of any alternative solutions or features you've considered. | ||
|
||
**Additional context** | ||
Add any other context or screenshots about the feature request here. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,36 @@ | ||
--- | ||
name: Security Issue | ||
about: Report a security issue | ||
title: "[SECURITY] " | ||
labels: Security Issue | ||
assignees: patrickhener | ||
|
||
--- | ||
|
||
**What is the cause of the security issue? Please describe.** | ||
A clear and concise description of what the problem is. Ex. Goshs is susceptible to directory traversal due to unsanitized user input in function [...] | ||
|
||
**What is the impact? Please elaborate** | ||
A clear and concise description of the impact. Ex. An attacker could read any file outside the hosted directory. | ||
|
||
|
||
**Give a Proof-of-Concept** | ||
*Request* | ||
|
||
``` | ||
GET /../../../etc/passwd HTTP/1.1 | ||
... | ||
``` | ||
|
||
*Response* | ||
|
||
``` | ||
HTTP/1.1 200 OK | ||
content-type: [...] | ||
``` | ||
|
||
*Run command* | ||
`curl --path-as-is "http://localhost:8000/../../../etc/passwd"` | ||
|
||
**Additional context** | ||
Add any other context or screenshots about the security issue here. |