Are they just an issue with wefwef or trying to use an exploit

  • 𝙚𝙧𝙧𝙚
    link
    fedilink
    21 year ago

    I’d be willing to bet they’re using the API to make all the changes. The cookie has the jwt token. I don’t believe you need the username (at least judging by the js API docs).