ttffdd ttffdd

## Server-Side Template Injection - RCE For the Modern WebApp by James Kettle (PortSwigger).md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
            
              
                
                0 comments
              
            
          
            
              
              0 stars
            
          
        
        
          
              
          
          
            
                ttffdd
                / Server-Side Template Injection - RCE For the Modern WebApp by James Kettle (PortSwigger).md
            
            
              Created
              December 15, 2016 15:29
            
          
        
      
        
  
      
    > Dear ${user.first_name},
Dear sample01

> Dear ${user.password}
FreeMarket template error: the following has evaluated to null or missing...
Q: Is it safe to allow users to upload templates if they are untrusted?