HackerOne · Report #1509
DNS Misconfiguration
Validstatus
19upvotes
15 Feb 2014disclosed
How it was found
Your localhost.hackerone.com has address 127.0.0.1 and this may lead to "Same- Site" Scripting.
Here is detailed description of this minor security issue (by Tavis Ormandy): http://www.securityfocus.com/archive/1/486606/30/0/threaded