HackerOne · Report #2221
CSS leaks SCSS debug info
Validstatus
13upvotes
28 Feb 2014disclosed
How it was found
Download CSS style sheet referenced from the HTML and do:
grep -oP "file.:.*?scss" application-facbdb64a504bb08ec272860320e1941.css | sort | uniq
As you can see it exposes information about the file system, source CSS files and software used.
See enclosed file for a dump of the output of the command above.