Disclosure of Email title report in quick award paypout email (no content mode)
该报告还没有中文解读。
原文摘录
摘自原文(1214 字符中的一小部分)
Description In report #645264 and #669776, email title disclosure has been fixed in no content settings. However, there is one more area which needs to be fix - "Instant bounty Award Email". In this email, even though email settings have been set as "No content", still it's displaying Report Title.
原文中的代码
curl "https://api.hackerone.com/v1/programs/42738/bounties" \
-X POST \
-u "dummy:xxxxxxxx" \
-H "Content-Type: application/json" \
-d @- <<EOD
{
"data": {
"type": "bounty",
"attributes": {
"amount": 100,
"reference": "aaaaa",
"title": …默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @kunal94 · 版权归作者与 HackerOne 所有