Skip to content

Conversation

@KaKi87
Copy link
Collaborator

@KaKi87 KaKi87 commented Jun 14, 2025

Despite the existence of the DL_ZIP_WHITELISTED_DOMAINS environment variable, the API heavily depends on the ZIP URL to start with https://click.discord.com/ls/click?upn= (and the client is hard-coded to be so).

This PR shows my first attempt at bypassing this, which eventually fails because the SQLite database ends up being encrypted with the ZIP file's name.

@KaKi87 KaKi87 marked this pull request as draft June 14, 2025 21:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants