technology software

education

government public service

education learning

social media

English

ROUTEID

JSESSIONID

You're looking at domain 'hkbuchtl.qualtrics.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'hkbuchtl'. The second-level label 'qualtrics' is 9 characters long holding 3 vowels versus six consonants. It segments into four words: qu, alt, ric, s. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

csrf_token

j_username

j_password

_shib_idp_revokeConsent

donotcache

_eventId_proceed

html/7c/de/7cdea803-218c-4f07-b461-5f362478e3e6.html.gz

frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report

09ebd7f407439990aac227e70da23e1a819e8e30282928e324370805f480bec4

e800c1903fbd4448d78eb993fc5b04b61298fad928f4b73ddd54773adad300c8

87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

5bd14c2f4730e927d2717de4d19f224d685a64648452b4774772967d103a9672

217ad0498376f19a09644d51d1db4d231e1a03d68370223043a7d7304b5077a6

2342d0c695447dc3f6315c30fc746ad1654afac0c68c7a0009df7f77e091a83b

3f62ea40dee3bd296fd8fc992e265ca0cd9851335b2f99a66ee592f5a4f8015b

c1c77e8b1cbf5ce65c6113e5b414fb587464a431df17d6f08c916cf96149c6a6

dd01a7f8898e97907786f614994e854386dd8e48ae2a297f1d1aee018be7861c

5a839a999d2106ff7c07fc3557845b1730bbca8d52cba53914a83ac68504cfcf

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

viewport

HKBU.EDU.HK

EuroDNS S.A.

QUALTRICS.COM

NOC United States

ipadmin

Akamai Technologies, Inc.

Steven Jay Schecter

AKAMAI


jQuery(document).ready(function() {
	jQuery("#scrollable").scrollable({
		circular: true
		
	}).autoscroll({autoplay: true, interval: 1000}); 
	document.getElementById("username").focus();
	
	
	
	jQuery('#what_is_ssoid').click(function() {
		var msg = "SSOid is an unique login account name for you to access all central IT services provided by the University, such as your HKBU email, University Cyber Port System (BUniPort), Library System as well as other IT systems.<br><br><span style='color:red;'>For student, SSOid = student number</span><br><span style='color:red;'>For staff, SSOid = account name of HKBU Email (characters before ''@'')</span>";

		materialize_js.modal.ok_modal.open(
			"What is SSOid?", 
			msg, 
			"OK",
			function() {
			}
		);
		
	});
	
	jQuery('#btn_submit').click(function() {
		var hkbuEmail = document.getElementById('username').value;
		console.log('hkbuEmail: ' + hkbuEmail);
		
		// Check email format
		if (hkbuEmail.indexOf('@') === -1) {
			materialize_js.modal.ok_modal.open(
				"System Information",  
				"Please input a valid HKBU email address.", 
				"OK",
				function() {
				}
			);
			return false;
		}
		
		// Check accepted domains
		var acceptedDomains = ['@uat.hkbu.edu.hk','@uatlife.hkbu.edu.hk','@uatso.hkbu.edu.hk','@uatassociate.hkbu.edu.hk','@hkbu.edu.hk','@life.hkbu.edu.hk','@so.hkbu.edu.hk','@associate.hkbu.edu.hk'];
		var inputDomain = hkbuEmail.substring(hkbuEmail.indexOf('@'));
		inputDomain = inputDomain.toLowerCase();
		
		console.log('inputDomain: ' + inputDomain);
		
		if (!acceptedDomains.includes(inputDomain)) {
			materialize_js.modal.ok_modal.open(
				"System Information",  
				"Please input a valid HKBU email address.", 
				"OK",
				function() {
				}
			);
		
			return false;
		} 
		
		// Convert email to ssoid
		var ssoid = hkbuEmail.substring(0, hkbuEmail.indexOf('@'));
		console.log('ssoid: ' + ssoid);
		document.getElementById('username').value = ssoid;
		document.getElementById("hkbu-hkaf-form").submit();
	});

	
        jQuery('#show_pwd').click(function() {
                var currentType = document.getElementById('password').getAttribute('type');
                if (currentType == 'password') {
                        document.getElementById('show_pwd').innerHTML = 'visibility_off';
                        document.getElementById('password').setAttribute('type', 'text');
                } else {
                        document.getElementById('show_pwd').innerHTML = 'visibility';
                        document.getElementById('password').setAttribute('type', 'password');
                }
        })
	
});

jQuery(document).keypress(function (e) {
	var eBtnSubmit = document.getElementById('btn_submit');
	
	// Enter button
	if (e.which == 13) {
		if ($(eBtnSubmit).length > 0) {
			$(eBtnSubmit).click();
		}		
		e.preventDefault();
		return;
	}
});

/* <![CDATA[ */
var modelPanel = 0;
			 
function focusbacktopassword(e)
{
	if (e.keyCode == 13) {
//		jQuery("input[type=password]").focus();
		if(modelPanel <= 1){
			document.getElementById('signinForm:password').focus();
		}
		return true;
	}
}

function focusbacktousername(e)
{
	if (e.keyCode == 13) {
//		jQuery("input[type=password]").focus();
		if(modelPanel <= 1){
			document.getElementById('signinForm:username').focus();
		}
		return true;
	}
}
/* ]]> */




if (jQuery.browser.msie) {
	if (jQuery.browser.version == 9) { 
		window.XMLSerializer = function() {
		};
		window.XMLSerializer.prototype.serializeToString = function(oNode) {
			return oNode.xml;
		};
	}
}

function closePanelByEnter(e, id){
	if (e.keyCode == 13) {
			e.preventDefault();
	        e.stopPropagation();
		  Richfaces.hideModalPanel(id); return false
	  }
}


Requests	IP Address	Location	AS Autonomous System
14	23.59.18.47	Hamburg, Free and Hanseatic City of Hamburg, Germany	AS16625Akamai Technologies, Inc.
13	23.55.161.191	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
27	2	-	-

Security Scan Report: hkbuchtl.qualtrics.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History