Medal.tv plugin API — origin gate proof of concept
This page is served from … and is demonstrating that any
origin can read Medal's local plugin API on 127.0.0.1:26905–26914 from the victim's
browser. Read-only demo: /health + /clips/recent + thumbnails. No state-changing calls are made.
1 · port scan + /health (origin: )
scanning…
2 · /clips/recent (token-authenticated)
waiting for token…