4 ms·

what they prolly meant is reporter went to the debugger network tab and saw the JSON response which had the full social returned. "HTML source code" is lingo f

• jeroenhd 5y ago
  From the looks of the page I doubt the output was anything as fancy as JSON. This looks like a classic pre-rendered page from the early 00s, made by the nephew of the CEO or equivalent. I'm actually surprised there's JS running on these pages at all. There's a bunch of <input type="hidden"> elements in the search page, so I guess they did something similar to hide the information from their `select *` that wasn't meant for public consumption. Edit: looking at the code (directly referencing XMLHttpRequest etc.) it might also be raw HTML being injected into a table somewhere... Edit 2: based on the "base64" comments, I'm guessing the "view state" (ASP term?) was not encrypted and contained some secret info. There are other systems from other states running on similar tech, but they seem to encrypt their viewstates...