Bug in Username Login page (Hybris version 6.8)

[former_member939612]

Greetings! My name is Anton and I am a manual tester in a small company located in Bulgaria and Belgium. We are developing Hybris E-commerce websites and recently we found a bug in the Login page. When we made negative testing for the Login form we found that User can log in with invalid e-mail address by adding a special character. We inputted # in between the characters in the email address and the system just let us pass with no error message for an invalid e-mail address. Here are example steps that we used in our projects

1 Open a browser and navigate to the project

2 From the Login page click on the E-mail address

3 Enter invalid address: test#@yourdomain.com

4 Enter valid password

5 Click on the Login button

Can you please check and give feedback, we will be thankfull !

[fsoni2021]

I have similiar queston around.

When user in B2B sold to has issue loggin into the portal screeen where their credentials are set up already and having issues loggin. Where may be the issue persist specially for gobal customers.

[VinayKumarS]

Hi Tony,

there is a restriction/limitation in hybris. Due to XSS rule application dont allow # into the system.

For more information please look into it.

https://hybrismart.com/2018/04/14/five-things-about-sap-hybris-you-probably-didnt-know/