Copilotfree, in-browser
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Your input lands in a template that gets evaluated on the server, and evaluation means code execution.
Server-Side Template Injection
Your input lands in a template that gets evaluated on the server, and evaluation means code execution.
Prototype Pollution
You poison one shared object and suddenly every object in the app inherits a property you control.
HTTP Request Smuggling
The front-end and back-end disagree about where one request ends, so you hide a second request inside the first.
Race Conditions
You fire the same request many times in the same instant and slip through the gap between check and use.
Attacking GraphQL
One endpoint, a self-documenting schema, and per-field authorization that developers forget to write.