Berengar W. Lehr

My not-so-nice-fix is: ```css /* Fix für Github Boost Union Issue #459 */ .navbar.navbar-dark.bg-dark .dropdown-item + ul > li > a, .navbar.navbar-dark.bg-primary .dropdown-item + ul > li > a {...

I think you are on the right track, but as I said there is no `csrfauth` in the page (https://gist.github.com/BerengarWLehr/03d82d6ddd2aa6a49ceab8262fe79f4a). The page regularly sends updates via POST Content-Type application/x-www-form-urlencoded; charset=UTF-8,...

Update: So I found `edubarUtils.js:256` where at least the payload is made a little bit more obvious. ```js var obj = { eqap: cs0, eqacs: sha1(cs0), eqaz: useEncryption ? '1'...

This explains where cs0 is coming from: So its kind-a zip compressed version of `rpcparams={}

By the way, if you actually enter a code (I testes "1234") `cs = urlencode(rpcparams={"t2fasec":"1234","2fNoSave":"y","2fform":"1","tu":null,"gu":null,"au":null})` ```json { "t2fasec":"1234", "2fNoSave":"y", "2fform":"1", "tu":null, "gu":null, "au":null } ``` Not even the request ID...

It's a bit of a challenge to emulate bitewise equality to ```js var gz = new Zlib.RawDeflate(encoder.encode(cs)) var compressed = gz.compress() ``` from the zlib library at https://github.com/imaya/zlib.js/raw/master/bin/rawdeflate.min.js But it's...

A few little changes and still only with entering the code. Just accepting 2FA in the App does currently not work: The correct URL for sending 2FA code L110-112: ```python...