Henry Yuan
Henry Yuan
I had this issues while while fetching pools on the subgraph ``` { "name": "RoutingLambda", "requestId": "73a213f3-bd36-da34-83c6-db19e46c028b", "hostname": "169.254.81.245", "pid": 12, "level": 30, "err": { "message": "indexing_error: {\"response\":{\"errors\":[{\"message\":\"indexing_error\"}],\"status\":200,\"headers\":{}},\"request\":{\"query\":\"\\n query getPools($pageSize:...
在默认的 'disk' => 'public'下: 测试案例: /admin/media/download?file=../../../../../../../etc/passwd 效果:会下载passwd的配置文件 /admin/media/download?file=../../../.env 效果:会下载env文件 虽然可以允许只有超管访问当前目录,但是感觉有点危险