UX: JS error on Password Safety link

Disclosed: 2017-08-26 05:35:24 By mehmil To legalrobot
None
Vulnerability Details
Hi Team, The link at https://app.legalrobot.com/account under "Password Safety" seems to be incorrectly configured. On clicking "here's how", I get following error: ``` Uncaught TypeError: Cannot read property 'title' of undefined at Object.click .how (89e4d4e….js?meteor_js_resource=true:301) at 89e4d4e….js?meteor_js_resource=true:73 at Function.e._withTemplateInstanceFunc (89e4d4e….js?meteor_js_resource=true:73) at p.View.<anonymous> (89e4d4e….js?meteor_js_resource=true:73) at 89e4d4e….js?meteor_js_resource=true:73 at Object.p._withCurrentView (89e4d4e….js?meteor_js_resource=true:73) at p._DOMRange.<anonymous> (89e4d4e….js?meteor_js_resource=true:73) at HTMLAnchorElement.<anonymous> (89e4d4e….js?meteor_js_resource=true:73) at HTMLDivElement.dispatch (jquery-3.2.1.min.js:3) at HTMLDivElement.q.handle (jquery-3.2.1.min.js:3) ``` Source JS file : https://app.legalrobot.com/89e4d4e5f94c29cff9fb29556730107fadae85ff.js?meteor_js_resource=true Attached screenshots. This is not a security flaw as such, but more of a usability bug, so I have marked severity as None. Please review.
Actions
View on HackerOne
Report Stats
  • Report ID: 262109
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report