Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Level 4 has a bug. Entering a string in the text box for the timer solves the problem, but putting that string directly as the get parameter in the URL doesn't. Anyone know how to report this?


What payload are you using on that level? Keep in mind that ";" is often treated as a parameter separator in URLs, similarly to &. If you put it into the mock URL bar it will terminate the value of your parameter (see also http://en.wikipedia.org/wiki/Query_string#Web_forms)

PS. Consider it reported, thanks!


Escaping the ';' works on that one


Also using the ',' operator works.


Thankyou. I was trying my payload but couldn't get it to work. I'm sure there's a better way to do it.


Do you have a '+' in your string? In URL it's interpreted as a space, use '%2B' instead.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: