TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Tumblr security hole: does this work for you?

4 点作者 IvoGeorgiev大约 13 年前
Recently, after some playing with the chromium debugger in the Tumblr blog customize panel, I discovered that just about any theme (including premium) can be downloaded via a simple wget command:<p>wget http://tumblr.com/customize_api/theme/34426 --post-data="Origin: http://www.tumblr.com"<p>This would download a JSON object which contains the theme file (under the "theme" field).<p>In this case, the theme I've downloaded is Paperback (http://www.tumblr.com/theme/34426); As you can see, the theme is premium and requires a 49$ fee to use. I can just copy the theme code from the JSON I downloaded, paste it in "Edit HTML" and use that theme for free.<p>I do not advise anyone to do it, but it's worth exploring. Of course, if the theme code leaks, it can be easily pirated, but don't you think being able to just download every single theme is a little too far?<p>Try this: wget http://tumblr.com/customize_api/theme/8952 --post-data="Origin: http://www.tumblr.com" (rank &#38; file) Or wget http://tumblr.com/customize_api/theme/15063 --post-data="Origin: http://www.tumblr.com" (Fluid 2)<p>You can browse the themes to fetch the ID's using the Tumblr theme garden (http://tumblr.com/themes) or by browsing this JSON object: http://www.tumblr.com/customize_api/themes

暂无评论

暂无评论