This URL parameter BREAKS YOUR APP

Interesting bug I found with my app, that happens on any Bubble page it appears… Even bubble.io suffers from this.

When ?_escaped_fragment_=#! is added onto your bubble app’s URL, it renders, but is unusable. (Ex. www.yourapp.com/?_escaped_fragment_=#!)

The only reason I care -

When people search for my app on Bing, it takes them to
www.myapp.com/?_escaped_fragment_=#!

So everyone… check your URLs in search engines!

This is now a potential SECURITY issue too!

bubble.io/?_escaped_fragment_=#! shows me apps that aren’t mine.

This topic was automatically closed after 14 days. New replies are no longer allowed.