Have never been into writing blog posts but after last few evenings trying to get @giteaio and @woodpeckerci together that both have internal CA certificate I might write one... 😅
Today received my first bug bounty 🎉 Though a bit sad thing that @Microsoft did not fix the problem, so will have to use everywhere my own workaround to fix problems in @dotnet security
Hey, @msftsecresponse@msftsecurity. How providing invalid X-Forwarded-For header through proxy thus hiding real IP address from Microsoft .NET 5 application is not considered security issue? Quite confused... :/