HexBrain

Legal Robot · Report #268612

Venturebeat.com URL should be HTTPS

Validstatus
10upvotes
20 Oct 2017disclosed

How it was found

This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible.

Navigate to:

     https://www.legalrobot-uat.com/

Example page (In the lower part where you find the observer.com Link):

observer redirect to HTTPS after click, but cookie is sent on the network before that.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original