My user agent can execute it, so I presume if I were to make the same requests in the same order with the same params, I'd be able to see it. I don't care to actually do it though, only to know that it could be done if there was actual motivation.
Perhaps! There are also some tricks built in to stop you from curling it, as it will send some escape characters to your terminal that clear the screen.
I was able to capture main.js by using firefox inspector and throttling the connection to GPRS, and hitting the STOP before anything else happened. I'm surprised the escape characters prevented me from curling to a file tho.
Yep.. throttling the connection worked for me too!
Is the page borked? It will let me view the page for a bit, and then I'm redirected to /haha. (I didn't try to inspect an element.)
it does have some false positives, like when your mouse leaves the page. Sorry about that!
I would have used a proxy.
That assumes it can detect you're curling it in the first place.
the escape characters are embedded as comments in the source code whether or not you curl it