HexBrain

HackerOne · Report #46952

Markdown code block sequence makes report unreadable

Validstatus
6upvotes
29 Jun 2015disclosed

How it was found

Proof of Concept

Submitting a report/comment with an input like the following

"Three backticks followed by a newline followed by -d*{d}d/<<d"

will cause the report to be unreadable (I think it's because the parser is crashing?)

The attached file includes the input that I'm trying (with difficulty) to describe with text, since I can't actually include the crasher in the report.

This may have no security implications; the worst I can imagine doing with this is annoying people by creating reports that can't easily be closed.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original