Why do https://scratch.mit.edu/downloadx and others output 403s?

mybearworld

When you go to https://scratch.mit.edu/downloadx you get a 403.
Edit: Same on https://scratch.mit.edu/ideasx and https://scratch.mit.edu/contact-usx and https://scratch.mit.edu/explorex and https://scratch.mit.edu/searchx
AND, thanks Maximouse, https://scratch.mit.edu/svgs/carousel/next_ui-dark-gray.svgx too.
Only the pages with subpages work - them that don't have one don't.

instead of x, just do any character…
Ex.

And it works for /… too:

Bug using a similar behaviour was found here, talking about some of these pages can sign you out.

Last edited by mybearworld (Aug. 14, 2021 15:07:03)

LankyBox01

Wow, probably just a test for the original download page.

mybearworld

LankyBox01 wrote:
Wow, probably just a test for the original download page.

Can't be.. look what I found too.

mlcreater

[(removed by mlcreater because I said the same thing the post above this says)

Last edited by mlcreater (Nov. 7, 2020 20:38:04)

mybearworld

mlcreater wrote:
It seems like you get a 403 when you go to https://scratch.mit.edu/downloadBMQXEVLWDTMI as well.

You can type anything you want after download.
Even download%20, what is *very* weird.

LankyBox01

Hmm, maybe if scratch uses .htaccess, it can be a bug.

mlcreater

The same thing happens to https://scratch.mit.edu/ideasABCDE
Also https://scratch.mit.edu/contact-us/helloworld

https://scratch.mit.edu/community_guidelines_meow is a 404 but it signs you out.

Last edited by mlcreater (Nov. 7, 2020 20:41:06)

mybearworld

mlcreater wrote:
The same thing happens to https://scratch.mit.edu/ideasABCDE
Also https://scratch.mit.edu/contact-us/helloworld

Whoa..

LankyBox01

Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory

mybearworld

mlcreater wrote:
https://scratch.mit.edu/community_guidelines_meow is a 404 but it signs you out.

yeah you could put that for a different topic in bugs and glitches

Last edited by mybearworld (Nov. 7, 2020 20:43:41)

mybearworld

LankyBox01 wrote:
Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory

But why do https://scratch.mit.edu/mystuffx and https://scratch.mit.edu/createx work!?

mlcreater

mybearworld wrote:
mlcreater wrote:
https://scratch.mit.edu/community_guidelines_meow is a 404 but it signs you out.
yeah you could put that for a different topic in bugs and glitches

I'm on it!

LankyBox01

mybearworld wrote:
LankyBox01 wrote:
Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory
But why do https://scratch.mit.edu/mystuffx and https://scratch.mit.edu/createx work!?

Because the pages you discovered only had the problems with the 404
The things that you need an account to access with, probably doesn't have the problem

Maximouse

mybearworld wrote:
LankyBox01 wrote:
Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory
But why do https://scratch.mit.edu/mystuffx and https://scratch.mit.edu/createx work!?

My Stuff is a 2.0-styled page, that's an entirely different thing.
I didn't even know scratch.mit.edu/create is a thing, not sure about that one.

mybearworld

LankyBox01 wrote:
mybearworld wrote:
LankyBox01 wrote:
Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory
But why do https://scratch.mit.edu/mystuffx and https://scratch.mit.edu/createx work!?
Because the pages you discovered only had the problems with the 404
The things that you need an account to access with, probably doesn't have the problem

create doesn't require an account

Last edited by mybearworld (Nov. 7, 2020 20:47:27)

mybearworld

Maximouse wrote:
mybearworld wrote:
LankyBox01 wrote:
Ok, so i think it's a glitch with their 404.
Maybe it cannot get 404.html so it uses the most common method: 403 not allowed

…but that's just a theory
But why do https://scratch.mit.edu/mystuffx and https://scratch.mit.edu/createx work!?
My Stuff is a 2.0-styled page, that's an entirely different thing.
I didn't even know scratch.mit.edu/create is a thing, not sure about that one.

/create is a shortcut to /projects/editor/?tutorial=gettingStarted

LankyBox01

Ok, my theory is that it's a bug.

Last edited by LankyBox01 (Feb. 19, 2021 13:01:19)

Maximouse

https://scratch.mit.edu/create doesn't have subpages. https://scratch.mit.edu/download does ( https://scratch.mit.edu/download/scratch2 ).

mybearworld

Maximouse wrote:
https://scratch.mit.edu/create doesn't have subpages. https://scratch.mit.edu/download does ( https://scratch.mit.edu/download/scratch2 ).

That looks quite interesting, I'll add that do the OP.

Maximouse

LankyBox01 wrote:
Ok, my theory is that it's a bug.
Can anyone look at the source code and identify this?

The bug is probably on the server, so the source code can't help much.

Discuss Scratch