5 ms·
> Nothing after the # will be sent over HTTPs I notice it wants to run Cloudflare insights. Do they track this?
by paulnpace 2y ago
> Nothing after the # will be sent over HTTPs
I notice it wants to run Cloudflare insights. Do they track this?
- dontdoxxme 2y agoThey do, so in theory everything after the '#' is not sent, however it frequently sends a request to "https://notepadtab.com/cdn-cgi/rum https://notepadtab.com/cdn-cgi/rum?" which is part of Cloudflare Analytics (https://www.cloudflare.com/en-au/web-analytics/ https://www.cloudflare.com/en-au/web-analytics/). The payload includes "timingsV2" data, which leaks the hash part to the server.