Hacker GitHub

← All repos

isaacs/st

View on GitHub ↗ ★ 380 JavaScript

A node module for serving static files. Does etags, caching, etc.

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2014-03-22 · latest 2014-03-22

Mentions per year 3 mentions · busiest year 2014 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …this change has more to do with XSS than the "big" exploit. The more serious fix occurred here: https://github.com/isaacs/st/commit/6b54ce2d2fb912eadd31e2c2... And here: https://github.com/isaacs/st/commit/6d6100eec8b19e2774a6f2bb... With…
    comment by matt_kantor · 2014-03-22 · in Npm security post-mortem
  2. …and Charlie Somerville > * We fixed it on February 17th the fix scares the shit out of me: https://github.com/isaacs/st/commit/5a0c1886737a20d78ae00b61... Properly escape all relevant html entities Avoid problems with files named things…
    comment by cyphunk · 2014-03-22 · in Npm security post-mortem
  3. Actually, someone submitted a pull request to fix this 4 hours before my original comment: https://github.com/isaacs/st/pull/37/files
    comment by dav- · 2014-03-22 · in Npm security post-mortem