Google's login page accepts a vulnerable GET parameter

Re:Google's login page accepts a vulnerable GET parameter by gyey on Tuesday August 30, 2016 @10:55PM (#12395676)

continue=https://www.google.com/amp/yahoo.com is taking me to a Google error page that says yahoo.com is invalid amp code.

[ Parent | on HN ]

Re:Google's login page accepts a vulnerable GET parameter by adrianratnapala on Wednesday August 31, 2016 @12:06AM (#12395951)

I am being redirected to a page that will let me change my google account recovery options.

My guess is that posting this thing on HN has caused them to fix it.

OR maybe I'm being phished.

[ Parent | on HN ]

Re:Google's login page accepts a vulnerable GET parameter by gyey on Wednesday August 31, 2016 @04:53AM (#12396918)

the /amp/ hack only works for desktop and not mobile. I was on mobile and that's why I got the Google error page.

[ Parent | on HN ]

Re:Google's login page accepts a vulnerable GET parameter by lsaferite on Tuesday August 30, 2016 @11:40PM (#12395867)

Weird, it worked perfectly for me just now.

[ Parent | on HN ]