4 ms·

This website does some crazy redirect loop between medium at the sub domain when opened without JS. How is that even possible?

by koolba 7y ago

ev1 7y ago
Server side redirect after tracking cookies aren't set by JS. Advertising.com blogs (AOL?) do the same thing.
saagarjha 7y ago
It didn't for me. (It did, however, make the content of the page load roughly two orders of magnitude faster.)
arkadiyt 7y ago
Also running into this issue.
ehnto 7y ago
Potentially done with an http-equiv meta tag hidden inside a noscript tag < meta http-equiv=refresh content=0; url=http://example.com/ >
nieve 7y ago
Nothing magic, they're just sending a HTTP 302 redirect if they don't see a cookie. If you hit it with wget you'll see two 302s, one of them with the old "Moved Temporarily" text and the other with "Found". I'm not sure why you only get two with wget, possibly user-agent sniffing. Tracing with firefox's dev tools I see an initial JS redirect, but that may be a bug since I've got javascript disabled for medium. Alternatively it's a bug in NoScript and that's not good. Either way they'll toss a 302 with no js at all.
shakna 7y ago
It returns a 302 header with this location: https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Fonezero.medium.com%2Fi-got-my-file-from-clearview-ai-and-it-freaked-me-out-33ca28b5d6d4 https://medium.com/m/global-identity?redirectUrl=https%3A%2F... Which then sends another location of: https://onezero.medium.com/i-got-my-file-from-clearview-ai-and-it-freaked-me-out-33ca28b5d6d4 https://onezero.medium.com/i-got-my-file-from-clearview-ai-a... Which just ends up bouncing you back and forth, unless JS is allowed to percolate through. However, there is some useragent sniffing happening, so the exact set of headers changes.
Cyykratahk 7y ago
I had the same issue. Found it was because I had set Firefox to block all cookies for medium.com (probably to get around the article limit).

This website does some crazy redirect loop between medium at the sub domain when opened without JS. How is that even possible?

by koolba 7y ago

This website does some crazy redirect loop between medium at the sub domain when opened without JS. How is that even possible?

ev1 7y ago

Server side redirect after tracking cookies aren't set by JS. Advertising.com blogs (AOL?) do the same thing.

saagarjha 7y ago

It didn't for me. (It did, however, make the content of the page load roughly two orders of magnitude faster.)

arkadiyt 7y ago

Also running into this issue.

ehnto 7y ago

Potentially done with an http-equiv meta tag hidden inside a noscript tag < meta http-equiv=refresh content=0; url=http://example.com/ >

nieve 7y ago

Nothing magic, they're just sending a HTTP 302 redirect if they don't see a cookie. If you hit it with wget you'll see two 302s, one of them with the old "Moved Temporarily" text and the other with "Found". I'm not sure why you only get two with wget, possibly user-agent sniffing. Tracing with firefox's dev tools I see an initial JS redirect, but that may be a bug since I've got javascript disabled for medium. Alternatively it's a bug in NoScript and that's not good. Either way they'll toss a 302 with no js at all.

shakna 7y ago

It returns a 302 header with this location: https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Fonezero.medium.com%2Fi-got-my-file-from-clearview-ai-and-it-freaked-me-out-33ca28b5d6d4 https://medium.com/m/global-identity?redirectUrl=https%3A%2F... Which then sends another location of: https://onezero.medium.com/i-got-my-file-from-clearview-ai-and-it-freaked-me-out-33ca28b5d6d4 https://onezero.medium.com/i-got-my-file-from-clearview-ai-a... Which just ends up bouncing you back and forth, unless JS is allowed to percolate through. However, there is some useragent sniffing happening, so the exact set of headers changes.

Cyykratahk 7y ago

I had the same issue. Found it was because I had set Firefox to block all cookies for medium.com (probably to get around the article limit).