Hacker News Reader

Does anyone know if this this an actual feature implemented in Heroku or is it an open vulnerability? I'm not finding any documentation on this command.

View on HN

I can't imagine it's considered a vulnerability. Heroku has had a documented `heroku console` that can do at least as much as bash can, security-wise.

Ah, I totally forgot about heroku console.

Reply on news.ycombinator.com