Server-side template injection with information disclosure via user-supplied objects 1 Server-side template injection with information disclosure via user-supplied objects 23/11/2024