800+ IT
News
als RSS Feed abonnieren📚 Shopify: Ability to publish a paid theme without purchasing it.
💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com
Hi, Description I kept looking for alternatives to my report #927567 and I found another way to publish a paid theme without having to purchase it. This time the trick is to send "ThemePublishLegacy" XHR request while the theme is being installed. Requirements Google Chrome suggested because that's what I use to describe my steps Steps to reproduce Make sure you have the default theme installed and that it is published Install any free theme Publish the free theme you just installed From your developper tool, copy the ThemePublishLegacy XHR request as fetch and paste it in your developper tool console and keep it for later. fetch("https://yourshop.myshopify.com/admin/online-store/admin/api/unversioned/graphql", { "headers": { "accept": "application/json", "accept-language": "fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7", "cache-control": "no-cache", "content-type": "application/json", "pragma": "no-cache", "sec-fetch-dest": "empty", "sec-fetch-mode": "cors", "sec-fetch-site": "same-origin", "x-online-store-web": "1" }, "referrerPolicy": "no-referrer", "body": "{\"operationName\":\"ThemePublishLegacy\",\"variables\":{\"id\":\"gid://shopify/OnlineStoreTheme/[THEME_ID]\"},\"query\":\"mutation ThemePublishLegacy($id: ID!) {\\n onlineStoreThemePublish(id: $id) {\\n theme {\\n id\\n __typename\\n }\\n userErrors {\\n field\\n message\\n __typename\\n }\\n __typename\\n }\\n}\\n\"}", ... ...