Because Java's URL class does not normalize paths, and because the code never checks for .. segments, a request containing ../../ in its path will cause the backend to receive a URL that escapes the ...
Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...