http

[ghost]

I know that like zero websites use http nowadays but wharerver.

[ghost]

Not sure to put this in another issue or here, but websites could automatically be upgraded to https if they support it.

[ghost]

URLs could also have https:// applied to them for convenience. (Instead of typing https://google.com you could type google.com and that would work.

[WaveDemure]

URLs could also have https:// applied to them for convenience. (Instead of typing https://google.com you could type google.com and that would work.

lazy

[ghost]

URLs could also have https:// applied to them for convenience. (Instead of typing https://google.com you could type google.com and that would work.

lazy

very

[akabutnicer]

URLs could also have https:// applied to them for convenience. (Instead of typing https://google.com you could type google.com and that would work.

lazy

very

It's possible, but due to the fact that is a supposedly 'mid' exploit, do not expect updates. I could make a PR, although, I'm quite sure it won't be approved. Or, if you're experienced with JavaScript, you can create a pull request yourself.

[ghost]

URLs could also have https:// applied to them for convenience. (Instead of typing https://google.com you could type google.com and that would work.

lazy

very

It's possible, but due to the fact that is a supposedly 'mid' exploit, do not expect updates. I could make a PR, although, I'm quite sure it won't be approved. Or, if you're experienced with JavaScript, you can create a pull request yourself.

I know it’s supposed to be just a silly thing given it’s literally titled Buypass POC but I really like this idea all because it doesn’t show up in history. Knock yourself out if you want to make the PR I guess.

[akabutnicer]

No need. I have created the PR already, you can view changes. It will most likely not get merged, but it's worth a look.

[akabutnicer]

It must have been closed. Instead, I can show what was changed, and you can create a PR, too.

Code changed:

function buypass() {
    let url = document.querySelector("input").value;
    new PaymentRequest(
        [
            {
                supportedMethods: location.origin + "/pay/main.json",
                data: { url: -1 !== url.indexOf("https://") ? url : url.replace(/^/, "https://") },
            },
        ],
        {
            total: {
                label: "_",
                amount: { value: "1", currency: "USD" },
            },
        }
    ).show();
}

document.querySelector("button").onclick = buypass;

Specifically:

-1 !== url.indexOf("https://") ? url : url.replace(/^/, "https://");

[bypassiwastaken]

idk submit a pr then

[akabutnicer]

lil bro i just did you said no