Reply to Re: The Dink Network - Proper HTTPS Support
If you don't have an account, just leave the password field blank.
Adding HTTPS support to Dink's downloading would be good, but because Dink isn't vulnerable to "zip-slip" anymore I don't see it as an emergency.
I'm not aware of any other Proton-based app/game downloading and unzipping files, but yeah, if they are, they should make sure they don't allow the "../" trick in filenames and/or be using https. This applies to any engine/sdk, really.
I'm not aware of any other Proton-based app/game downloading and unzipping files, but yeah, if they are, they should make sure they don't allow the "../" trick in filenames and/or be using https. This applies to any engine/sdk, really.