3 ms·
I found a couple of fun tricks you can do with this (for some definition of "fun" anyway). Go's http.Redirect function allows non-3xx statuses, and also render
by rlk 1y ago
I found a couple of fun tricks you can do with this (for some definition of "fun" anyway).
Go's http.Redirect function allows non-3xx statuses, and also renders a trivial page with a status message and link:
https://301party.com/451?url=javascript:alert(%27hello%27) https://301party.com/451?url=javascript:alert(%27hello%27)
Alas not infinitely recursive but enough to make your browser give up:
https://301party.com/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url=/301?url= https://301party.com/301?url=/301?url=/301?url=/301?url=/301...
[edit to add:] https://301party.com/0 https://301party.com/0 causes a panic
- Pyrodogg 1y agoI'm so used to getting 451's that the example flew right over my head. First reaction was, "ugh this again [reaches for vpn]".