7 ms·

Here's one reason why it's not a brilliant platform, check the URL after clicking log in: http://codecombat.com/play/ladder/gold-rush?email=ohdear@example.org&

by eterm 12y ago

Here's one reason why it's not a brilliant platform, check the URL after clicking log in: http://codecombat.com/play/ladder/gold-rush?email=ohdear@example.org&password=goddam http://codecombat.com/play/ladder/gold-rush?email=ohdear@exa... edit: Seems to only happen after clicking log in on the main page right side bar rather than the header one.

nwinter 12y ago
Can you email nick@codecombat.com to help us reproduce this? It sounds like a form is getting submitted somehow, which shouldn't happen. I haven't been able to reproduce in Firefox, Chrome, or Safari yet. Sorry about this–we take security seriously.
- eterm 12y ago
  Thanks, I've dropped you an email with the steps to reproduce. Somehow I had landed on a particular ladder page and it looks like it may have an older style log in modal.
  - nwinter 12y ago
    Thank you! I'm tracking the bug over here and will fix soon: https://github.com/codecombat/codecombat/issues/1153 https://github.com/codecombat/codecombat/issues/1153
    - Smudge 12y ago
      Nice response time!
segmondy 12y ago
No, it might be insecure, but that doesn't mean that it's not brilliant. The platform is not designed for security. It's designed to play a game while coding, and it does that.