News for hackers. Stuff that matters.
Re:Neat trick for getting private info for Facebook, GMail, ... by mike-cardwell on Tuesday January 25, 2011 @11:38AM (#2139663)
302 wont work. It simply redirects to the destination page, and then the onload would be triggered. What you need to find is something which generates an error code, ie 4xx/500. When logged in, this generates a 406, because I set "format" to something invalid:

https://twitter.com/account/use_phx?setting=false&format...

But when logged out, it redirects to the login form which ultimately provides a 200 status code.

There are probably several other ways of making twitter generate a HTTP error code.

There are no comments on this comment yet.