English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

With web applications becoming a preferred method of presenting graphicaluser interfaces to users, software vulnerabilities affecting web applicationsare becoming more and more prevalent and devastating. Some of thesevulnerabilities, such as directory traversal attacks, have varying defensemechanisms and mitigations that can be difficult to understand, analyze, andtest. Gaps in the testing of these directory traversal defense mechanisms canlead to vulnerabilities that allow attackers to read sensitive data from filesor even execute malicious code. This paper presents an analysis of somecurrently used directory traversal attack defenses and presents a new,stack-based algorithm to help prevent these attacks by safely canonicalizinguser-supplied path strings. The goal of this algorithm is to be small, easy totest, cross-platform compatible, and above all, intuitive. We provide a proofof correctness and verification strategies using symbolic execution for thealgorithm. We hope that the algorithm is simple and effective enough to helpmove developers towards a unified defense against directory traversal attacks.

A Simple and Intuitive Algorithm for Preventing Directory Traversal Attacks