Subdomain takeover on s3.shopify.com
该报告还没有中文解读。
原文摘录
摘自原文（1416 字符中的一小部分）
**Preword** I know that this is not explicitly in scope, but I still felt it was serious enough to justify a report and let you decide the potential impact.
原文中的代码
s3.shopify.com. 3599 IN CNAME shopify-assets.s3.amazonaws.com. shopify-assets.s3.amazonaws.com. 7518 IN CNAME s3-directional-w.amazonaws.com. s3-directional-w.amazonaws.com. 7218 IN CNAME s3-1-w.amazonaws.com. s3-1-w.amazonaws.com. 4 IN A 52.216.80.56
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Shopify 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @avlidienbrunn · 版权归作者与 Shopify 所有