Yikes. This isn't good.

https://projects.scratch.mit.edu/project-id-here

Go to the link above and replace project-id-here with the ID of any Scratch project (unshared or shared), and you can download it.

Click here to download the first Scratch project.

Once downloaded, create a new project. Click File, then Load From Your Computer. Change the file type to All Files. Find where you downloaded the file and click it.

Found this bug while I was messing around with TurboWarp. I decided to investigate the endpoint it was using. I sent an email a while ago but I've yet to receive a response. Hopefully the ST can fix this soon, since I know this issue has been around since as early as Scratch 2.0 (!!)

Hopefully this won't get taken down. I've already emailed the ST, I'm just posting this here. Plus, this exploit is public anyways (turbowarp and phosphorus both have it)

My browser / operating system: MacOS Macintosh X 10.15.5, Chrome 85.0.4183.83, No Flash version detected

ooooooooooooooooooooooo

You don't even need to do that, go to https://llk.github.io/scratch-gui/master/#<PROJECT_ID> and download it straight away

Example — https://llk.github.io/scratch-gui/master/#45

That website is made by the Scratch Team at LLK



And then you can download it, this is caused due to a bug in the Scratch project's API, and the scratch team hasn't fixed this bug, this was found more than a year ago, and yet, not fixed

TurboWarp can also load unshared projects.

wvj wrote:

TurboWarp can also load unshared projects.

No it can't.

MunaAlaneme4th wrote:

wvj wrote:

TurboWarp can also load unshared projects.

No it can't.

That's because this was fixed a while ago, and this topic is no longer relevant.