HackerOne · Report #59369
Making any Report Failed to load
Validstatus
6upvotes
9 May 2015disclosed
Summary
Entering the text _www.%40.com_ (or similar) into a report caused the report to fail to load. This issue also impacted the bulk edit interface, preventing the targeted user from closing and removing the report in any way.
How it was found
Hello,
I found a way to make any report failed to load using this code with Hex Character:
_www.%40ebаy.com_
I was testing for Homographic Issue using Hex Characters and I listed all of hex character and tried to bypass.
Then, when I paste the list and comment it in a report I experienced report failed to load then I paste each code with hex character one by one. I figured out that %40 causes the report failed to load.
To reproduce this issue:
- Create a sample report then add a comment using the code above.
- Then, Refresh and you will receive a message
Report Failed to load
Regards, @atom