Hacker News Reader

Comment by floatingatoll | Hacker News Reader

Does the vulnerability permit access to a directory index, in order to identify the filenames of exciting attachments to transmit?

Apparently not. You can create a test.html file with the following content:

    <script>
      fetch(".").then(r => console.log(r));
      fetch("/").then(r => console.log(r));
    </script>

The console show errors when these URLs are loaded:

    TypeError: NetworkError when attempting to fetch resource. test.html:2:1