one of them claimed the fact that you can run "curl http://¹²7.0.0.1"; is a vulnerability.
I insist this is IDN working as designed. However crazy it may look like.You just cannot filter URLs like that and assume it will work.
daniel:// stenberg:// /
npub1cm…penqe
2024-06-15 20:51:26
in reply to nevent1q…8uv2
Author Public Key
npub1cm0ds9u8u42r7xeq7zwhgjcgj3p4ynv7dlj2jk4wknq8kshqzt9smpenqePublished at
2024-06-15 20:51:26Event JSON
{
"id": "954dbcdf824b8cd5e2cdba3458ec9bba5c62e15044a679d85f1cadf2873bf416",
"pubkey": "c6ded81787e5543f1b20f09d744b089443524d9e6fe4a95aaeb4c07b42e012cb",
"created_at": 1718484686,
"kind": 1,
"tags": [
[
"p",
"c6ded81787e5543f1b20f09d744b089443524d9e6fe4a95aaeb4c07b42e012cb"
],
[
"proxy",
"https://mastodon.social/@bagder/112622612382480576",
"web"
],
[
"e",
"3b057eaa8a589a84203a8742599b033ec66a702af75cc6c203f83c792b99a9f3",
"",
"root"
],
[
"proxy",
"https://mastodon.social/users/bagder/statuses/112622612382480576",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/bagder/statuses/112622612382480576",
"pink.momostr"
]
],
"content": "one of them claimed the fact that you can run \"curl http://¹²7.0.0.1\" is a vulnerability.\n\nI insist this is IDN working as designed. However crazy it may look like.You just cannot filter URLs like that and assume it will work.",
"sig": "3ba6bc7d8bc76a1604c1ec5193b0ee11075d5c273b18cca0d04813d0caf4aad65b26521129a6b738802f0c2253072c781f36e2fa14a1cf7e0859c9b7299aa2ec"
}