Server-side template injection with information disclosure via user-supplied objects 1 Server-side template injection with information disclosure via user-supplied objects Nov 23, 2024