Coinbase · Report #237071
X-Frame-Options
Informativestatus
1upvotes
22 Jun 2017disclosed
Summary
Report noted that status.coinbase.com is embed-able due to its current X-Frame-Options. As there was not a demonstrated link susceptible to clickjacking, this was not a security issue, but notification of the lack of this header was considered Informative.
Note: per our policy, reports for status.coinbase.com will not be eligible for bounty.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.