Content Spoofing with text injection

Hubspot hosted page allows content spoofing through text injection by messing around with the URL.


A picture speaks a thousand words. Here's how it looks like:


Screen Shot 2017-06-02 at 11.21.35 AM.png

Please set up a proper 404 page for this.

HubSpot updates