Results
2
comments of
jav0x
Yes, relying on login?a= is risky because it detects a redirect symptom, not the RSC protocol. Hitting root (/) often triggers middleware.ts redirects (307/308). This usually drops the POST body...
Indeed, That's a valid concern regarding strict LBs/WAFs. To mitigate this, my proposed update implements a hybrid approach probing both paths (already implemented like this in my [repo](https://github.com/fatguru/CVE-2025-55182-scanner)): path: -...