Lyst · Report #207329
Mixed Active content issue on https://www.lyst.com
Validstatus
lowseverity
12upvotes
22 Feb 2017disclosed
Summary
An erroneous conditional comment for Internet Explorer browsers lower than version 9 was causing an attempted load of an insecure, non-existent JavaScript file over certain HTTPS requests from www.lyst.com. Although the targetted browser sessions were very low in number the request could still technically be hijacked. The comment has now been removed and the page no longer serves this request.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.