Scope issue (original) (raw)
Go to:
http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html
Click on the * to decide scope.
Options are:
http://*.isecpartners.github.io
Ideally it would be: http://*.github.io , at least that makes sense to me?
Or at least, that should be included.
Seems like a behavior issue, when there is a domain and a subdomain the subdomain should be *'d as an option.
Example of it done properly: movies.netflix.com
Options:
https://*.netflix.com
I hope this is clear enough.