Legal Robot · Report #251469
Meta characters are not filtered into full name on profile page
Validstatus
9upvotes
30 Jul 2017disclosed
Summary
A security researcher discovered that ASCII control characters were allowed in the user's profile fields. A simple change now strips these characters from fields like First Name, Last Name, etc.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.