Some peoples found a way to copy and paste verification badge in TextChatService

Malicious users are abusing a vulnerability to impersonate others with a fake verified badge, due to it not getting filtered by the chat:


I’ve tested in a random game to see if other players could really see it in chat:
image

Reproduction steps are in private content for staff

Expected behavior

The verified badge unicode should always get filtered in chat.

A private message is associated with this bug report

3 Likes