You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Zimpl supports reading files and printing their contents. And the scip subprocesses are started with the same user that started the zimplayground server. All files that are readible by this user can easily be leaked.
We could forbid reading from files, or check whether the path is located within some specific folder.
The text was updated successfully, but these errors were encountered:
Zimpl supports reading files and printing their contents. And the
scip
subprocesses are started with the same user that started thezimplayground
server. All files that are readible by this user can easily be leaked.We could forbid reading from files, or check whether the path is located within some specific folder.
The text was updated successfully, but these errors were encountered: