-
Notifications
You must be signed in to change notification settings - Fork 106
Closed
Description
- navigate to Profile
- attempt to change Display name
- press save
- observe the 403 (the request is shown in the PUT below)
- observe the page reloads without the name changing
I right-clicked on the bogus PUT, said "Copy as cURL", elided the Cookie, changed the UUID in userId but otherwise this is what generated the 403. The response was content-length: 2 with {} so nothing helpful there
curl 'https://www.linen.dev/api/profile' -X PUT \
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:108.0) Gecko/20100101 Firefox/108.0' \
-H 'Accept: */*' \
-H 'Accept-Language: en-US,en;q=0.5' \
-H 'Accept-Encoding: gzip, deflate, br' \
-H 'Referer: https://www.linen.dev/s/linen/t/2931844/I-m-also-guessing-my-forum-username-is-based-on-the-portion-' \
-H 'Content-Type: application/json' \
-H 'Origin: https://www.linen.dev' \
-H 'DNT: 1' \
-H 'Connection: keep-alive' \
-H 'Cookie: __Secure-linen.session-token=eyJhb...' \
-H 'Sec-Fetch-Dest: empty' \
-H 'Sec-Fetch-Mode: cors' \
-H 'Sec-Fetch-Site: same-origin' \
-H 'Pragma: no-cache' \
-H 'Cache-Control: no-cache' \
-H 'TE: trailers' \
--data-raw '{"userId":"cafebabe-aaaa-bbbb-cccc-cafebabe0000","displayName":"mdaniel"}'
Metadata
Metadata
Assignees
Labels
No labels