How important is to see the site URL?
Good afternoon, the community!
This question became interesting: how important is it to see the site URL? Once, 2 years ago, I made a web application on an autumn evening, tested everything in a browser that is still popular today, and found an inherently interesting bug.
When performing some manipulations, javascript hid the URL of the site, that is, downloaded the contents and left the browser address bar clean. At once there were thoughts that this can be used for not very good purposes, such as phishing, etc.
Without hesitation, wrote a bug report with a note of information security. The company recognized the bug and assigned a priority of “low”. I thought well, so be it. I was following the developments, with the release of new versions I made updates in the bug report, reminding that the bug is still relevant. Some time passed, the n-th number of updates, the bug remained relevant and after my next reminder about the actuality of the bug I was told that the bug reports with a priority of "low" do not need to be tracked in the next versions. After that, of course, I scored and forgotten!
')
And so it took more than 2 years. About 20 browser updates. And what do I see? Everything remains as before, everything also my test site starts with an empty address bar. In this regard, I wondered what the public would have to do with such a bug and what the results of the survey would be.
This question became interesting: how important is it to see the site URL? Once, 2 years ago, I made a web application on an autumn evening, tested everything in a browser that is still popular today, and found an inherently interesting bug.
When performing some manipulations, javascript hid the URL of the site, that is, downloaded the contents and left the browser address bar clean. At once there were thoughts that this can be used for not very good purposes, such as phishing, etc.
Without hesitation, wrote a bug report with a note of information security. The company recognized the bug and assigned a priority of “low”. I thought well, so be it. I was following the developments, with the release of new versions I made updates in the bug report, reminding that the bug is still relevant. Some time passed, the n-th number of updates, the bug remained relevant and after my next reminder about the actuality of the bug I was told that the bug reports with a priority of "low" do not need to be tracked in the next versions. After that, of course, I scored and forgotten!
')
And so it took more than 2 years. About 20 browser updates. And what do I see? Everything remains as before, everything also my test site starts with an empty address bar. In this regard, I wondered what the public would have to do with such a bug and what the results of the survey would be.
Source: https://habr.com/ru/post/261899/
All Articles