Tootfinder

Increasingly of the belief that "can write to disk at all" is an unacceptable risk for a webapp. Whether session tokens or file uploads or body buffers or whatever. Leave all of that to a database or blob store or reverse proxy. Ideally, run the webapp in a container with a readonly filesystem.
#HotTake #LocalFileInclusion