9 ms·
yikes, Gravatar has an open redirect. http://www.gravatar.com/avatar/8ca7425c8ada807b9bf6934f10d59fa.jpg?&d=http%3A%2F%2Fnews.ycombinator.com http://www.gravat
by bigethan 15y ago
yikes, Gravatar has an open redirect.
http://www.gravatar.com/avatar/8ca7425c8ada807b9bf6934f10d59fa.jpg?&d=http%3A%2F%2Fnews.ycombinator.com http://www.gravatar.com/avatar/8ca7425c8ada807b9bf6934f10d59...
It's a fun trick, but it should't be possible.
- grok1fy 15y agoGravatar is designed that way so you can use any default image. The technique is described in the Gravatar docs under "Default Image." http://en.gravatar.com/site/implement/images/ http://en.gravatar.com/site/implement/images/
- bigethan 15y agoAh. But I'd expect think that they'd limit it to only images, or do some sorta safety checking. I recognize the performance concerns, but it's too easy to add a malware redirect onto their trusted url.