trellis-ldp/trellis

Disallow remote JSON-LD contexts

Closed this issue · 0 comments

acoburn commented

Client-supplied remote JSON-LD contexts could be used as an attack vector, and as such, they should be disabled