Mike Fährmann a00b60fbe7 [twitter] update 'x-csrf-token' header (fixes #1170) ...

Twitter started using a bigger (80 instead of 16 bytes) CSRf token for
logged in users, and expects those to be used as 'x-csrf-token' header
when send via 'ct0' cookie.

Generating an 80 byte token ourselves doesn't work, and Twitter will
still insist on using its own.

2020-12-11 13:46:58 +01:00

27 KiB

Raw Blame History

View Raw