luggs-co / ncrypt Goto Github PK
View Code? Open in Web Editor NEWThis project forked from stbuehler/ezcrypt
Home of NCrypt
Home Page: https://ncry.pt/
This project forked from stbuehler/ezcrypt
Home of NCrypt
Home Page: https://ncry.pt/
The output from find "CodeMirror/mode" -mindepth 1 -type d
should be piped through sort
to produce somewhat reproducable results.
The cert on https://ncry.pt has expired. When i went to send an email to the listed contact address ([email protected]) it does not go through (no MX record and the server that the A/AAAA records points to does not respond on port 25).
If "fullscreen" and "wrap-lines" are enabled when loading a paste (remembered in cookies), only the first 11 lines will be displayed; after a click on the bottom part the remaining text gets displayed.
Some modes (e.g. "gfm") require addon/mode/overlay
, which is not included.
This leads to a runtime exception during load, breaking the complete site...
nginx doesn't allow combining rewrite and alias, so this is a little bit difficult. This is the best I came up with so far:
~~~~ nginx with alias ~~~~ # nginx doesn't allow combining rewrite and alias # also set $__config['site']['url'] accordingly location /paste/ { alias /srv/ncrypt/; index not-existing-file; fastcgi_split_path_info ^(/paste)(/.+)$; include fastcgi.conf; # default fastcgi params # overwrite some params fastcgi_param SCRIPT_FILENAME $document_root/index.php; fastcgi_param PATH_INFO $fastcgi_path_info; if (!-f $request_filename) { fastcgi_pass php-backend; } # there is no need to access any php file directly location ~ \.php$ { deny all; } }
For transparency reason (and with the authorization of the NCrypt maintainer), the email I sent to NCrypt the 02/03/2017 is reproduced below:
I just found an XSS vulnerability in NCrypt.
<script>alert('XSS')</script>
As far as I tested it, the choice of programming language don't change the result.
Note: the payload can be "hidden" in a lot of text or code in order to "trick" users.
As far as I know, the impact is quite limited because you don't store the previous posted links in the browser, but it can be used to de-anonymize users for example.
I found this vulnerability because I'm currently and voluntarily searching for XSS vulnerabilities in a lot of FLOSS.
I remain available for any additional comments or questions.
Best,
Martin
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.