Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

  • @Alpha71
    link
    English
    1611 months ago

    I have no idea what any of that meant.