#php

Articles tagged with #php

One Byte Of Disagreement
How we use Codex to find vulnerabilities worked end to end on GHSA-f8fg-pg57-v4j8 XSS in league/commonmark's AttributesExtension: the on* event-handler filter bypassed with a single form feed I. Intro
Sep 11, 202618 min read74
Deleting any file on a Coolify managed server with a single `..`
I. Introduction Coolify is an open-source, self-hostable PaaS that lets you deploy apps, databases, and pre-baked services on your own servers — the "Vercel/Heroku/Netlify replacement, but you own the
Jun 16, 202610 min read88
Anatomy of a GHSA Collaboration: Fixing Filament's MFA Race Together
I. Introduction Filament is an open-source full-stack UI framework for Laravel built on top of Livewire. It lets developers compose admin panels, forms, tables, infolists, actions, and notifications a
May 29, 202611 min read96