Justinas Stankevičius
Justinas Stankevičius
Having just one cookie with a path and domain like that is absolutely fine and in fact it is the default behavior even if you do not set Path &...
Might not be the best solution, but you could give each route in your router a separate nosurf instance. Many routers support adding subrouters, so you could have "api" and...
It might not be an ideal solution, but I would not like to introduce much complexity for filtering routes in nosurf itself (separate blacklist/whitelist modes, etc.).
As I understand it, the BREACH attack works when the same secret is sent across many requests. I don't think including the same token several times on one page should...
Ok, my wording was a bit off. Repeating the same token on a page **does** have influence, but capturing one request is not enough to recover it. Nosurf's approach should...
Again, it might be `twitter`'s fault for using hidden, undocumented attributes, though urllib2 uses them as well (e.g. `socket._fileobject`.
Please see the attached log. [androidtv.log](https://github.com/jellyfin/jellyfin-androidtv/files/8240708/androidtv.log)
Compiled a debug APK of the latest master and it seems that the problem still persists (with the same error message).
Please see attached the logs from a debug build. [androidtv.log](https://github.com/jellyfin/jellyfin-androidtv/files/8247808/androidtv.log)
Yes, the infinite retry is gone now. The bizarre part is that AAC works fine (direct plays) with any local media I've tried, so the device not supporting AAC is...