|
Well, just guessing here, but I think the hack will fail in situations where either a cookie needs to be present (as regularly the case for login-based sites) or the website expects form data to be sent via a POST request. Also I think it might not catch cases where the URL in question does not indicate the type of the data - e.g. downloads that set filenames with "Content-Disposition" HTTP headers.
|