Note to self: see if I have brotli enabled in Caddy, and axe it if I do.
0 Boosts
0 Likes
Good news! Past me was smart, I only had zstd and compress enabled, so I don't need to disable anything!
For the record, I wasn't aware of the vulnerability at the time. I just saw brotli mentioned, and how it's pretty much a Google-only thing, and decided I don't need that, thankyouverymuch.
@jacksonchen666 yes, but as far as I can tell, unlike brotli, it is used much wider outside of fb.
@hipsterelectron IIRC, it was one of your toots that reminded me of it, so thank you! :)
@algernon does the decoder vuln affect caddy? i'd have thought it'd just be encoding
@algernon another one??? another huge vuln??