HexBrain

Legal Robot · Report #251469

Meta characters are not filtered into full name on profile page

Validstatus
9upvotes
30 Jul 2017disclosed

Summary

A security researcher discovered that ASCII control characters were allowed in the user's profile fields. A simple change now strips these characters from fields like First Name, Last Name, etc.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original