This repository was archived by the owner on Nov 10, 2025. It is now read-only.
This repository was archived by the owner on Nov 10, 2025. It is now read-only.
oracle service vulnerability: local information leak #693
Description
the following way of avoiding local access is not enough:
neo-modules/src/OracleService/Protocols/OracleHttpsProtocol.cs
Lines 41 to 46 in 32aacc4
since a remote server is able to return a redirect response whose target is https://local-address/x.
original issue neo-project/neo#2662