Help centre
Open this page with a reader’s place already in the URL, the way a shared link would arrive: append #hc=/en — or any path the Help Center serves — and reload.
- Scenario
- Arriving on a deep link
- Watch for
- The frame opens straight at that path instead of the home page. A crafted value such as
#hc=//evil.test/or#hc=https://evil.test/must be refused and fall back to the home page.
Try each of these, then reload:
- #hc=/en — accepted
- #hc=//evil.test/ — must be refused
- #hc=https://evil.test/ — must be refused
- #hc=%2F%2Fevil.test%2F — must be refused, decoded first