• 0 Posts
  • 49 Comments
Joined 1 year ago
cake
Cake day: September 22nd, 2025

help-circle



  • eleijeep@piefed.socialtoLinux@lemmy.ml•BSOD
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    16 days ago

    Oh I see. If the URL puts the sensitive information after the anchor, like https://example.com/bsod#sensitive-info-goes-here then the browser would never send that part to the server. Everything after the anchor is just used locally by the browser to scroll the page to a specific place (or in this case for the javascript to read and process).

    You’d need to check every time you scan a QR code though that the # is in the URL and it’s not malformed. Trivially replacing the # with a ? would turn the private URL into one that sends all the data in the GET request. It’s training users to do something risky.

    Oh and it also assumes that the javascript hasn’t been tampered with to upload the data somewhere.

    I don’t like it.














  • scrap (third-person singular simple present scraps, present participle scrapping , simple past and past participle scrapped)

    (transitive) To discard; to get rid of.

    (transitive) To stop working on (a project or plan) indefinitely.

    Synonyms: abort, cancel, mothball

    https://en.wiktionary.org/wiki/scrap

    vs.

    scrape (third-person singular simple present scrapes, present participle scraping , simple past and past participle scraped)

    (ambitransitive) To draw (an object, especially a sharp or angular one), along (something) while exerting pressure.

    Synonym: scuff
    She scraped the wooden plate with her fingernails.
    That car often scrapes the shallowest of humps because of its low ground clearance.
    …
    (transitive) To collect or gather, especially without regard to the quality of what is chosen.

    Just use whatever you can scrape together.

    (computing, transitive) To extract data by automated means from a format not intended to be machine-readable, such as a screenshot or a formatted web page.

    They didn’t provide an API, so I simply scraped their website.

    https://en.wiktionary.org/wiki/scrape