Security context

Highlights

Path Traversal: 1 prior fix. Scrutinize any change in this area.

src/main/java/ru/st/selenium/proxy/FileDownloadingInterceptor.java: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Path Traversal: The file download interceptor allowed arbitrary file creation paths because it extracted temporary filenames directly from the user-controlled Content-Disposition header. An attacker could exploit this to perform a path traversal attack and overwrite or write files outside the intended temporary directory.