[LLVMbugs] [Bug 12235] New: LLVM online demo exposes server files

[bugzilla-daemon at llvm.org]

http://llvm.org/bugs/show_bug.cgi?id=12235

             Bug #: 12235
           Summary: LLVM online demo exposes server files
           Product: Website
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P
         Component: General Website
        AssignedTo: unassignedbugs at nondot.org
        ReportedBy: frane.saric at gmail.com
                CC: llvmbugs at cs.uiuc.edu
    Classification: Unclassified


One could use llvm online demo to expose (parts of) some server files. For
example after entering this code:

#define bash ;
#include </etc/passwd>

compiler errors will contain info about local usernames.

-- 
Configure bugmail: http://llvm.org/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.