mhoshdev questions

mhoshdev answers

• Audit url open for permitted schemes. Allowing use of "file:" or custom schemes is often unexpected