in reply to Re: how to improve my script
in thread how to improve my script
I downloaded and ran your code, and traversals with ".." definitely work:
skx@gold:~$ telnet 127.0.0.1 4321 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. GET /../../../../../../etc/passwd HTTP/1.0 root:x:0:0:root:/root:/bin/bash ..
I notice too that you never return a content-type in your response which is surprising to say the least! (I was surprised that firefox displayed the resulting pages correctly.)
In Section
Seekers of Perl Wisdom