@dansup there was this really stupid MySpace clone in like 2020 or 2021 and it used GET requests for tons of endpoints for which there Absolutely Should Not Have, and I added a CSS background-image set to the endpoint to follow my account to my profiles theme. Was so funny how badly made that thing was. accurate to 2000s web security though lmao