Lack of input validation in e-mail & user name, job title, company name field
错误配置 / 违反安全设计原则（按标题归类） / #254927
该报告还没有中文解读。
原文摘录
摘自原文（717 字符中的一小部分）
Hi, During sign up input validation didn't deploy properly on e-mail & name field. I've tested inputing following e-mail during sign up: ``hacker~%@gmail.com`` Your system send email to verification the account though the e-mail address is invalid as gmail doesn't allow user to sign up using …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Legal Robot 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @smziaurrashid · 版权归作者与 Legal Robot 所有