On: Google Bug Bounty – The $5k Error Page

[thaumasiotes]

My favorite bug bounty report so far read, in its entirety, "try it ASAP".

[arkadiyt → thaumasiotes]

I've received reports for things like "source code disclosure" where they link to our jQuery.

[illumin8 → arkadiyt]

LOL - I'd like to report that I was able to download the entire source code of your website by right-clicking and selecting "View Page Source..."

[thaumasiotes → illumin8]

If only that were true... modern web pages frequently have basically nothing of any value in the page source; it's all dynamically loaded.