Skip to content

v1.2.2

Choose a tag to compare

@github-actions github-actions released this 25 Mar 04:56
· 242 commits to main since this release
v1.2.2 — Fix reply bypass with x-client-transaction-id generation

The GraphQL web fallback was getting error 226 (automated request detected)
because X requires a dynamically generated x-client-transaction-id header.

Added scripts/gen_transaction_id.py — a self-contained Python script (no
dependencies beyond stdlib) that:
1. Fetches X homepage to extract twitter-site-verification key
2. Fetches the ondemand.s JS file for key byte indices
3. Parses SVG animation data from the homepage
4. Generates the transaction ID via cubic bezier interpolation + SHA256

xmaster shells out to this script when the web fallback triggers.
Tested: successfully posted a reply to a non-mentioner's tweet.

Based on: github.com/iSarabjitDhiman/XClientTransaction (MIT)