Hyper Link Injection In email and Space Characters Allowed at Password Field.
该报告还没有中文解读。
原文摘录
摘自原文（1334 字符中的一小部分）
I found that when you put email and password for signup, you can use space characters for the password which shouldn't be allowed. I also found that you can use hyperlink in First Name Field at next step when you are entering your personal information here and when you will get the first email of …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Phabricator 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @iamnot1337 · 版权归作者与 Phabricator 所有