0

I'm testing if my application is prone to path traversal attacks, but when browsing to localhost/browser/../123/456.txt Chrome automatically converts the URL to localhost/browser/123/456.txt. How can I prevent Google Chrome from removing the ../ part?

Woask
  • 59
  • 1
  • 9
  • I doubt Google will alter Chrome for you, but there are other tools available - you could try [cURL](https://en.wikipedia.org/wiki/CURL). – Andrew Morton Mar 01 '19 at 14:53
  • 1
    I used curl with the --path-as-is flag to test out my application. Thanks for the hint. – Woask Mar 02 '19 at 10:28

0 Answers0