Legal Robot · Report #260662
No length limit in invite_code can cause server degradation
Validstatus
4upvotes
31 Aug 2017disclosed
How it was found
Hi Team,
I get to know that in every field is secured by restricted limit by length, but, i can see that one place where you forget to add that security feature , which can cause server degradation.
https://app.legalrobot-uat.com/dmca-safe-harbor
Here, i can see feature to add invite-code , but i can see there is no length limit in that filed.
i can recommend to restrict limit to 10-12 character (as per business requirement ).
Thanks, Vishal.