HackerOne · Report #1093
LinkedIN URL should be HTTPS
Validstatus
10upvotes
18 May 2016disclosed
Summary
This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible. Treat this report with some salt, not as in hashes.
How it was found
Not really a security bug, but I think will be a good idea to add HTTPS on LinkedIN Share Button.
Example page (In the right side of page): https://hackerone.com/reports/547
LinkedIN redirect to HTTPS after click, but cookie is sent on the network before that.
Thanks!