Ability to change to >13 age

Bug Reports Website Bugs
#1

var token = Roblox.XsrfToken.getToken(); $.ajaxPrefilter(function (options, originalOptions, jqXHR) { jqXHR.setRequestHeader(‘X-CSRF-Token’, token); });
$.ajax({ type: “POST”, url: “/usercheck/updatepersonalinfo”, data: JSON.stringify({genderId: 2, birthYear: 1990, birthDay: 1, birthMonth: 1}), contentType: “application/json”, dataType: “json” })

Found on Reddit.

2 Likes
#2

This isn’t really an exploit or a bug since it’s using ROBLOX’s own API to change some parameters that I guess they didn’t check for.

#3

Yeah but without any kind of custom API calls it wouldn’t be possible, so the absence of server-side checks indicates something is amiss.

#4

if you seem smart enough to do this i bet you are older than 13

4 Likes