@jhaar @benno back in the insomniasec pentest times we used to call this type of thing "sPoNgE bOb-ing" after @benknight bypassed JWT auth with alg:nOnE cause they case-sensitive checked for == "none".
But this is how we build software. I guess these days at least we can blame it on LLMs, instead of some tired, overworked junior dev who was promised training and mentoring, but got crunch and burnout.
@CyReVolt ha ha I SAID DONT ASK
<_<
>_>
, its actually an entirely new implementation of the bot driving it now, lol