Rust

6833 readers

3 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

[email protected]

Credits

The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 2 years ago

MODERATORS

[email protected]

crates.io security incident: improperly stored session cookies (blog.rust-lang.org)

submitted 1 week ago by [email protected] to c/[email protected]

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 week ago (1 children)

Yeah, I wonder why any developer thought logging either the session cookie itself was a good idea. I guess they could decode it and figure out which user was having an issue? Still bizzare

[–] [email protected] 2 points 1 week ago (1 children)

Probably some automatic serialization that included the field. Someone forgot a #[serde(skip)]!

[–] [email protected] 2 points 1 week ago

Yeah I reflected on that after I posted it, maybe it just dumped all the headers to the logs