from a reddit post
"For example,
https://www.youtube.com/watch?v=DuB8VUICGqc // will occasionally show ads
https://www.youtube.com./watch?v=DuB8VUICGqc // will not show ads
It's a commonly forgotten edge case, websites forget to normalize the hostname, the content is still served, but there's no hostname match on the browser so no cookies and broken CORS - and lots of bigger sites use a different domain to serve ads/media with a whitelist that doesn't contain the extra dot
This works for many news websites as well serving paywalls, e.g.
https://www.nytimes.com./2020/06/09/us/ ... ho-is.html
349 comments
https://www.reddit.com/r/webdev/comment ... ing_a_dot/
fyi: You can bypass youtube ads by adding a dot after the domain
fyi: You can bypass youtube ads by adding a dot after the domain
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:68.0) Gecko/20100101 Firefox/68.0