documentation technical

technology software

entertainment media

government public service

forum community discussion

English

_help_center_session

__cf_bm

_cfuvid

The domain name 'help.bungie.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'help'. The core label 'bungie' covers 6 characters split between three vowels and three consonants. Splitting it apart reveals 1 word: bungie. No strong language cues emerged from the frequency lists.

utf8

query

commit

html/41/4d/414d05f0-74a9-433e-827c-df86b88e7a84.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

attachment; filename="cb8b8fa0437301c8e48e7e9337d525c393c3982f.js"

attachment; filename="5c6d3f407436a8e047cc248c16ed92b76a233543.js"

attachment; filename="bcbe5b4b18631e31b00f4fdf4f41a258014530fc.js"

attachment; filename="be2049a10beb9156efe1788a273362d40887aab2.js"

attachment; filename="4fe8c53a1600d6e938b3845c9d095c8673a815b3.css"

attachment; filename="07a0c8770038425846213e8c7de5359d9af06bf1.js"

attachment; filename="83bfa2ae5935e90acde76e9406d073d4031e3c84.svg"

attachment; filename="c3285ac656777c75e4b0c2c02ee41808336362a2.svg"

inline; filename="df8f92c5054e899fe005e4c8103e6668c774c920.jpg"

inline; filename="11669f6ee4ec037cb79d5484ae843af92d30e17e.png"

No content

87ddf5ff71323af305a7fea6702cc44fc57e0031c413a83c909abf26f7c19076

b8877313ae149212c9ff9baac19d5de993a7b70b7be684bef94d216d673f11e0

0785e2b2433cb69472a6dc71d2c6f64a58d73aa0735ca4838b5f0223b36898b6

99a8753a2ed5b6926f0bd47cf53a07adab99e05766c6486e067799fb9ca674a4

c421ea0a9f1ce10f57aecea56876ed58959bd1b4d2db3daaf9a959071b98dd80

1e94439446fad5f130b1d2ab881197b3ca66ea942332e71de2eb7936b4acd039

dd2144bb7a813d5462b5c5c8ec84e704ab709189a8a85edaa78c48e5d11ec5a6

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

7ad687c631951970091f69ba363b06419f2050ce7b34bf8326673584f18dc1c1

9a7eac42dbec0ea5ebd73f9b370c010adde1d7346c66756c3bef6edeb8d8d03a

57b37d7cae9a27d965fdae4adcc844245dfdc407e655aee85dcfff3a08036a3f

50beef303710b3eb8eb7c3a885366e0866450ccda24a7ba8c6ae6e831f52a986

a657bbd57ef44b8e88f44fc50bda08b6d4783a2a107faa6421083c507294e5de

9628d5d333931a993af69cd99dfa6fc9727a1b35c63f9da18b76b0f4a37a203d

eb201ca880fe42a52f34b2d4e47691b83ec5001ac99d9594291cbd96757dcc86

3402c7f821b05ff6c2e6dc96fca0f324d094a3bbb05780afb8e91e405d382ccf

b916a04a11ddcc636acbd80ba533211f0ffc6c4ef56bd6fd8bd497cf3145c56b

ee13fea92b96a24b3ef0b63e6c370718f14a3e2643baddb528245ba260af513e

7e1cafe64bfbf1df8f610de5d4c54fa9ef6e42e75f643165376a7fff8b4db763

86cf009d79962892de317af7a6e7e11409e8f92cb5d5afe667384120c1545a18

b332261833a5ad26babf99a9215b507f7758616a8894484450d26725f891614d

bdaf5f916b339642fe972f4f7c5c313fec0000f5c9e9d7c30393484f01358afb

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

fec61fd54978a2986906517192dc35c8285c97946474106f2f0b8ff6a54f20c9

7a5c208b95f7fc9cb2330968eca16fc849644092f043c7337a5ca59e04f81ae4

0bf175994cd032646cd5d5d3b9bfad9648a20f281cb56dc9a683cadac4f9caa7

026c0bf05af1b9cead69af9b07abd4ffdb083fae96720bdd9bb96bc3be0e8629

Error Downloading PS4 Required Content Files

Advanced Troubleshooting: UPnP, Port Forwarding, and NAT Types

Optimizing Connections: Improving Latency and Packet Loss

csrf-param

csrf-token

Occasionally, Destiny services may be brought offline to undergo scheduled or emergency maintenance, or to update the game to address...

description

https://help.bungie.net/hc/theming_assets/01K7TG7NARW1Y4K5QBVSZF0V8B

Occasionally, Destiny services may be brought offline to undergo scheduled or emergency maintenance, or to update the game to address gameplay issues or add in-game features. Please see below for i...

https://help.bungie.net/hc/en-us/articles/360049199271-Destiny-Server-and-Update-Status

viewport

”twitter:card”

”twitter:site”

”twitter:title”

”twitter:description”

”twitter:image”

”twitter:image:alt”

twitter:creator

zd-site-verification

CSC Corporate Domains, Inc.

BUNGIE.NET

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


  document.addEventListener("alpine:init", () => {
    Alpine.store('mobileMenu', {});
  });



  window.LotusConfig = {};
  LotusConfig.css = {
    activeClass: 'is-active',
    hiddenClass: 'is-hidden'
  };
  LotusConfig.icons = {
    360001780040: "/hc/theming_assets/01J2VTJ6ZTBJR2KACYQB4VP5J3",
    360001780020: "/hc/theming_assets/01J2VTJ720S945YP0DXPDEWFKK",
    360001795799: "/hc/theming_assets/01J2VTJ71V0NBRAYE91FMK5600",
    360001780000: "/hc/theming_assets/01J2VTJ7D8QPSX9PWJ0DN7BN8X"
  }



  /*

    Greetings sourcecode lurker!

    This is for internal Zendesk and legacy usage,
    we don't support or guarantee any of these values
    so please don't build stuff on top of them.

  */

  HelpCenter = {};
  HelpCenter.account = {"subdomain":"bungie","environment":"production","name":"Bungie"};
  HelpCenter.user = {"identifier":"da39a3ee5e6b4b0d3255bfef95601890afd80709","email":null,"name":"","role":"anonymous","avatar_url":"https://assets.zendesk.com/hc/assets/default_avatar.png","is_admin":false,"organizations":[],"groups":[]};
  HelpCenter.internal = {"asset_url":"//static.zdassets.com/hc/assets/","web_widget_asset_composer_url":"https://static.zdassets.com/ekr/snippet.js","current_session":{"locale":"en-us","csrf_token":null,"shared_csrf_token":null},"usage_tracking":{"event":"article_viewed","data":"BAh7CDoLbG9jYWxlSSIKZW4tdXMGOgZFVDoPYXJ0aWNsZV9pZGwrCKfImtRTADoKX21ldGF7DDoPYWNjb3VudF9pZGkDMDmNOhNoZWxwX2NlbnRlcl9pZGwrCBxctNFTADoNYnJhbmRfaWRsKwgT6NDRUwA6DHVzZXJfaWQwOhN1c2VyX3JvbGVfbmFtZUkiDkFOT05ZTU9VUwY7BlQ7AEkiCmVuLXVzBjsGVDoaYW5vbnltb3VzX3RyYWNraW5nX2lkMA==--9ff2413235bd96397b0e6fb914d3757e37271da6","url":"https://help.bungie.net/hc/activity"},"current_record_id":"360049199271","current_record_url":"/hc/en-us/articles/360049199271-Destiny-Server-and-Update-Status","current_record_title":"Destiny Server and Update Status","current_text_direction":"ltr","current_brand_id":360002414611,"current_brand_name":"Bungie Help","current_brand_url":"https://bungie.zendesk.com","current_brand_active":true,"current_path":"/hc/en-us/articles/360049199271-Destiny-Server-and-Update-Status","show_autocomplete_breadcrumbs":true,"user_info_changing_enabled":false,"has_user_profiles_enabled":false,"has_end_user_attachments":true,"user_aliases_enabled":false,"has_anonymous_kb_voting":true,"has_multi_language_help_center":true,"show_at_mentions":false,"embeddables_config":{"embeddables_web_widget":true,"embeddables_help_center_auth_enabled":false,"embeddables_connect_ipms":false},"answer_bot_subdomain":"static","gather_plan_state":"subscribed","has_article_verification":true,"has_gather":true,"has_ckeditor":false,"has_community_enabled":true,"has_community_badges":true,"has_community_post_content_tagging":false,"has_gather_content_tags":true,"has_guide_content_tags":true,"has_user_segments":true,"has_answer_bot_web_form_enabled":false,"has_garden_modals":false,"theming_cookie_key":"hc-da39a3ee5e6b4b0d3255bfef95601890afd80709-2-preview","is_preview":false,"has_search_settings_in_plan":true,"theming_api_version":1,"theming_settings":{"toggle_translations":true,"body_bg":"rgba(18, 23, 28, 1)","wrapper_bg":"rgba(245, 245, 245, 0.05)","brand_primary":"rgba(183, 140, 37, 1)","brand_secondary":"rgba(245, 245, 245, 0.75)","text_color":"rgba(245, 245, 245, 0.75)","link_color":"rgba(222, 169, 3, 1)","brand_info":"#3a4043","brand_success":"#5cb85c","brand_warning":"#fad782","brand_danger":"#d9534f","font_size_base":"15px","font_family_base":"'Helvetica Neue', Arial, Helvetica, sans-serif","line_height_base":"24px","logo":"/hc/theming_assets/01K7TG7NARW1Y4K5QBVSZF0V8B","home_logo":"/hc/theming_assets/01K7TG7NARW1Y4K5QBVSZF0V8B","logo_height":"45.313px","favicon":"/hc/theming_assets/01J2VTJ9E1NA2TXXTA96SWFGKS","border_radius_base":"4px","multi_homepage_image":"/hc/theming_assets/01JRHGWEWAPC980QMBGH3SN0H8","multi_unit_mask_bg":"rgba(29, 34, 38, 1)","multi_unit_mask_opacity":"none","hero_elements6":false,"multi_title":"Multibrand","multi_subtitle":"","goliath_homepage_image":"/hc/theming_assets/01KFBHHW1T03MHBJKT5XAT1F9R","goliath_unit_mask_bg":"rgba(0, 0, 0, 1)","goliath_unit_mask_opacity":"0.01","hero_elements3":false,"goliath_title":"Marathon","goliath_subtitle":"","d2_homepage_image":"/hc/theming_assets/01KTW536VT68MZ7WNA72VKDK4A","d2_unit_mask_bg":"rgba(0, 0, 0, 1)","d2_unit_mask_opacity":"0.1","hero_elements2":false,"d2_title":"Destiny 2","d2_subtitle":"","foundation_homepage_image":"/hc/theming_assets/01J2VTK38HAHGCQJ0RNVT6QB8B","foundation_unit_mask_bg":"rgba(0, 0, 0, 1)","foundation_unit_mask_opacity":"0.1","hero_elements4":false,"foundation_title":"Bungie Foundation","foundation_subtitle":"","safety_homepage_image":"/hc/theming_assets/01JRENDH9CEY9439H2FMM29S63","safety_unit_mask_bg":"rgba(29, 34, 38, 1)","safety_unit_mask_opacity":"0.2","hero_elements5":false,"safety_title":"Bungie Account and Safety Center","safety_subtitle":"","hero_homepage_image":"/hc/theming_assets/01KTWBE4VBM032T07G9M6B9DJ0","hero_unit_bg_position":"50% 70%","hero_unit_bg_size":"cover","hero_unit_mask_bg":"rgba(29, 34, 38, 1)","hero_unit_mask_opacity":"0.2","hero_elements":false,"hero_title":"Welcome! How can we help?","hero_subtitle":"Search for Error Codes, Network Issues, Items, etc.","toggle_custom_blocks":true,"toggle_category_list":true,"toggle_promoted_articles":true,"toggle_recent_activities":false,"icon_color":"rgba(0, 150, 219, 1)","icon_height":"72px","custom_block_1_type":"custom","custom_block_1_icon":"/hc/theming_assets/01J2VTJ9SS2TVSNYGFR06R883S","custom_block_1_title":"guide_-_custom_block_1_title","custom_block_1_url":"/hc/articles/49848696022548","custom_block_1_bg_image":"/hc/theming_assets/01KTW54XWNE23S8EYBWJBD1K6S","custom_block_1_bg_position_x":"-343px","custom_block_1_bg_position_y":"center","custom_block_1_bg_size":"cover","custom_block_2_type":"custom","custom_block_2_icon":"/hc/theming_assets/01J2VTJ9SS2TVSNYGFR06R883S","custom_block_2_title":"guide_-_custom_block_2_title_2","custom_block_2_url":"/hc/articles/39007140765204","custom_block_2_bg_image":"/hc/theming_assets/01J8TQ5742Y1MMM98XT2PYXPDV","custom_block_2_bg_position_x":"344px","custom_block_2_bg_position_y":"center","custom_block_2_bg_size":"cover","custom_block_3_type":"custom","custom_block_3_icon":"/hc/theming_assets/01J2VTJ9SS2TVSNYGFR06R883S","custom_block_3_title":"guide_-_custom_block_3_title","custom_block_3_url":"/hc/articles/360049023712","custom_block_3_bg_image":"/hc/theming_assets/01J2VTK64WQTDQMXRPTYGHGHXM","custom_block_3_bg_position_x":"415px","custom_block_3_bg_position_y":"center","custom_block_3_bg_size":"cover","custom_block_4_type":"custom","custom_block_4_icon":"/hc/theming_assets/01J2VTJ9SS2TVSNYGFR06R883S","custom_block_4_title":"guide_-_custom_block_4_title","custom_block_4_url":"/hc/articles/360049496531","custom_block_4_bg_image":"/hc/theming_assets/01J2VTK6XB2W15PWSJG0DNSYBJ","custom_block_4_bg_position_x":"-50px","custom_block_4_bg_position_y":"center","custom_block_4_bg_size":"cover","home_topbar_mode":"brand_only","topbar_text_color":"rgba(245, 245, 245, 1)","topbar_link_color":"rgba(245, 245, 245, 1)","ext_topnav":true,"topbar_left_link_1_label":"brand_-_bungie_help","topbar_left_link_1_url":"https://help.bungie.net/hc","topbar_left_link_2_label":"brand_-_destiny_help","topbar_left_link_2_url":"https://help.bungie.net/p/Destiny","topbar_left_link_3_label":"brand_-_marathon_help","topbar_left_link_3_url":"https://help.marathonthegame.com/hc","topbar_left_link_4_label":"brand_-_bungie_foundation","topbar_left_link_4_url":"https://help.bungiefoundation.org/hc","topbar_left_link_5_label":"brand_-_bungie_account_and_safety_center","topbar_left_link_5_url":"https://safety.bungie.net/hc","topbar_right_link_1_label":"foundation_-_bungie_net","topbar_right_link_1_url":"https://www.bungie.net","topbar_right_link_2_label":"menu_-_foundation","topbar_right_link_2_url":"https://bungiefoundation.org/","topbar_right_link_3_label":"menu_-_store","topbar_right_link_3_url":"https://bungiestore.com/","topbar_nav_dd_label":"menu_-_guides","topbar_nav_dd_item_1_label":"guide_-_new_player_guided_support","topbar_nav_dd_item_1_url":"/articles/360048720972","topbar_nav_dd_item_2_label":"guide_-_new_player_guide","topbar_nav_dd_item_2_url":"https://help.bungie.net/hc/en-us/sections/44229895049108-New-Player-Guides","topbar_nav_dd_item_3_label":"menu_-_mental_health","topbar_nav_dd_item_3_url":"/articles/4402601695252","topbar_nav_link_1_label":"guide_-_destiny_2","topbar_nav_link_1_url":"/p/Destiny","topbar_nav_link_2_label":"menu_-_goliath","topbar_nav_link_2_url":"https://help.marathonthegame.com/hc","topbar_nav_link_3_label":"menu_-_foundation","topbar_nav_link_3_url":"https://help.bungiefoundation.org/hc","topbar_nav_link_4_label":"guide_-_help_forum_button","topbar_nav_link_4_url":"https://www.bungie.net/en/Forums/Topics/?tg=Help","topbar_nav_link_5_label":"guide_-_contact_forms","topbar_nav_link_5_url":"/articles/360057978711","footer_text_color":"rgba(245, 245, 245, 1)","footer_link_color":"rgba(245, 245, 245, 1)","footer_social_link_color":"rgba(245, 245, 245, 1)","toggle_facebook_icon":false,"facebook_url":"","toggle_twitter_icon":true,"twitter_url":"https://twitter.com/BNGServerStatus","toggle_youtube_icon":false,"youtube_url":"","toggle_linkedin_icon":false,"linkedin_url":"","toggle_instagram_icon":false,"instagram_url":"","toggle_pinterest_icon":false,"pinterest_url":"","show_article_author":false,"show_article_comments":false,"show_follow_article":false,"show_related_articles":true,"show_follow_section":false,"show_follow_community_post":true,"show_community_post_sharing":false,"show_follow_community_topic":true},"has_pci_credit_card_custom_field":true,"help_center_restricted":false,"is_assuming_someone_else":false,"flash_messages":[],"user_photo_editing_enabled":true,"user_preferred_locale":"en-us","base_locale":"en-us","login_url":"https://bungie.zendesk.com/access?locale=en-us\u0026brand_id=360002414611\u0026return_to=https%3A%2F%2Fhelp.bungie.net%2Fhc%2Fen-us%2Farticles%2F360049199271-Destiny-Server-and-Update-Status","has_alternate_templates":true,"has_custom_statuses_enabled":true,"has_hc_generative_answers_setting_enabled":true,"has_suggested_initial_questions_enabled":false,"has_lisbon_theme_eap":false,"has_lisbon_theme_eap_eligible":false,"has_contentful_eap":false,"has_contentful_eap_eligible":false,"has_pdf_ingestion_eap":true,"has_pdf_ingestion_eap_eligible":true,"has_guide_service_catalog":true,"has_service_catalog_search_poc":true,"has_service_catalog_itam":false,"has_service_catalog_multibranding":false,"has_csat_reverse_2_scale_in_mobile":false,"has_trial_presumptive_setup":true,"has_unified_navigation":true,"has_unified_navigation_eap_access":true,"has_csat_bet365_branding":false,"has_csat_theming_integration_phase_1":false,"has_help_center_gen_search_follow_up_conversation":true,"version":"v27557","dev_mode":false};


Cloudflare Bot Management

HSTS

Envoy

Cloudflare

Zendesk

jsDelivr

jQuery

Twitter

Google Hosted Libraries

Destiny Server and Update Status – Bungie Help

✅ Low Risk - https://help.bungie.net/hc/en-us/articles/360049199271-Destiny-Server-and-Update-Status

Requests	IP Address	Location	AS Autonomous System
8	216.198.54.11	United States	AS209242Cloudflare London, LLC
6	216.198.54.3	United States	AS209242Cloudflare London, LLC
6	104.17.101.21	United States	AS13335Cloudflare, Inc.
6	104.17.207.5	United States	AS13335Cloudflare, Inc.
6	172.67.142.245	United States	AS13335Cloudflare, Inc.
6	74.125.29.95	United States	AS15169Google LLC
6	192.178.183.95	United States	AS15169Google LLC
44	7	-	-

Security Scan Report: help.bungie.net

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History