HexBrain

Legal Robot · Report #262109

UX: JS error on Password Safety link

Validstatus
4upvotes
26 Aug 2017disclosed

How it was found

Hi Team,

The link at https://app.legalrobot.com/account under "Password Safety" seems to be incorrectly configured. On clicking "here's how", I get following error:

Uncaught TypeError: Cannot read property 'title' of undefined
    at Object.click .how (89e4d4e….js?meteor_js_resource=true:301)
    at 89e4d4e….js?meteor_js_resource=true:73
    at Function.e._withTemplateInstanceFunc (89e4d4e….js?meteor_js_resource=true:73)
    at p.View.<anonymous> (89e4d4e….js?meteor_js_resource=true:73)
    at 89e4d4e….js?meteor_js_resource=true:73
    at Object.p._withCurrentView (89e4d4e….js?meteor_js_resource=true:73)
    at p._DOMRange.<anonymous> (89e4d4e….js?meteor_js_resource=true:73)
    at HTMLAnchorElement.<anonymous> (89e4d4e….js?meteor_js_resource=true:73)
    at HTMLDivElement.dispatch (jquery-3.2.1.min.js:3)
    at HTMLDivElement.q.handle (jquery-3.2.1.min.js:3)

Source JS file : https://app.legalrobot.com/89e4d4e5f94c29cff9fb29556730107fadae85ff.js?meteor_js_resource=true

Attached screenshots.

This is not a security flaw as such, but more of a usability bug, so I have marked severity as None.

Please review.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original