3 ms·
Yes have seen this is in a couple of my SaaS applications. If it's in the querystring then they essentially fuzz it by changing some part(s) of the value. I no
by rbut 3y ago
Yes have seen this is in a couple of my SaaS applications.
If it's in the querystring then they essentially fuzz it by changing some part(s) of the value. I noticed this because I use signed tokens and it raised an exception in Sentry when the signed token was invalid.
I ended up moving the signed token into the URL itself and the problem went away. eg. /unsubscribe/abcd1234/