HexBrain

Legal Robot · Report #260299

observer.com URL should HTTPS

Validstatus
6upvotes
14 Sept 2017disclosed

How it was found

#Summary

This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible. Treat this report with some salt, not as in hashes.

#Navigate to:

   https://www.legalrobot-uat.com/press/

Example page (In the lower part where you find the observer.com Link):

observer redirect to HTTPS after click, but cookie is sent on the network before that.

See my attached photo. {F212950}

Related Issue : #1093

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original