From 1deb3f2e6f4a1ddd0760a56794d7ce16232c47c3 Mon Sep 17 00:00:00 2001 From: Thomas Vanbesien Date: Fri, 27 Mar 2026 16:20:41 +0100 Subject: Add link --- Directory traversal/Resources/notes.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'Directory traversal') diff --git a/Directory traversal/Resources/notes.md b/Directory traversal/Resources/notes.md index d4068b8..fcecf3a 100644 --- a/Directory traversal/Resources/notes.md +++ b/Directory traversal/Resources/notes.md @@ -5,4 +5,6 @@ ## Fix -The problem is letting users directly input files to be included/read. Such input must be sanitized, with for example a strict list of allowed values, or rejecting input containing `../`. +[https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/05-Authorization_Testing/01-Testing_Directory_Traversal_File_Include]() + +The problem is letting users directly input file names to be included/read. Such input must be sanitized, with for example a strict list of allowed values, or rejecting input containing `../`. -- cgit v1.2.3