Кублан

О себе

ie-gate (BUG-013): on first hit we set a short-lived gate cookie and return // 200 HTML with a JS redirect to the same URL (+?r=1). Scanners don't execute JS // so they never make the second request and the token stays intact. Real browsers // (on any device, including cross-device confirmation) execute JS, follow the redirect, // and arrive at the second request with the gate cookie — which lets them through to // verifyOtp. ?r=1 is a loop-breaker: if the cookie is missing even after the JS // redirect (extreme edge case — cookie policy blocked), we fail fast. //

С чем работаю

• Психолог

Образование

Вышка

Языки работы

Русский