Hiro · Report #615336
EXIF Geolocation Data Not Stripped From Uploaded Images
Validstatus
lowseverity
$50bounty
20upvotes
3 Sept 2019disclosed
Summary
The Blockstack Browser does not strip EXIF data on avatar uploads.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.