X / xAI · Report #500686
url that twitter mobile site can not load
Validstatus
lowseverity
$1,120bounty
142upvotes
19 Mar 2019disclosed
How it was found
Summary: A url that twitter mobile site can not load, crushes any page containing this url
Description:
Invalid hex characters crushes twitter mobile site as example go to https://mobile.twitter.com/?%xx
twitter won't load.
- Sending such url on a direct message, twitter will no longer be able to load the conversation, F429765
- Tweet such url, anyone following you won't be able to load any tweets F429766
I think Twitter on the client side trying to find a value for %xx which is not possible so it raises an error
Steps To Reproduce:
- Go to https://mobile.twitter.com/
- Send or tweet this url
https://mobile.twitter.com/?%xx - You and your followers won't be able to see any tweets on the mobile site
Impact
This issue works only on https://mobile.twitter.com/ (not working on IOS, Android and https://twitter.com/ ) however, all twitter mobile users with no twitter app should be affected