stop serving grtp.co over HTTP
该报告还没有中文解读。
原文摘录
摘自原文（1733 字符中的一小部分）
1 Issue Details: Service available on HTTP As per the policy details under scope on HackerOne portal(https://hackerone.com/gratipay), the 'grtp.co'. should be available only on port 443 or HTTPS protocol. However grtp.co service is running on port 80 too (i.e., running on HTTP protocol even). As we …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Gratipay 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @secbughunter · 版权归作者与 Gratipay 所有