RE the quoted erlang bug report text:
I don’t think @josevalim intends to say that the null byte issue with Plug is minor, just that this isn’t necessarily a security issue in OTP itself.
2 Likes
