Working on understanding here, from https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information

---

test:

---

---