I was served an ad for a Nike hat that I thought was pretty cute on instagram. That hat that in the previous sentence made my eyes do something weird, imagine the first 3 words of this sentence. Anyway. I opened the link on my phone and saw that the page had one of those scarcity cta's "38 people viewing this". Red font. Doomsday clock ticks. Threat level sigma.

Whenever I see one of these I inspect the page justtt to see if it's Math.floor(Math.random() * 100) + 1, as I have an inkling many are.p So I opened my laptop and google nordstrom nike hat, clicked the first result and then nothing loaded. In the console:

and figured I would figure out what that meant. Always suspect when "current" and "history" and "edit" and "entry" are all used close to one another eek.

replaceState()

The History.replaceState() method modifies the current history entry, replacing it with the stateObj, title, and URL passed in the method parameters. This method is particularly useful when you want to update the state object or URL of the current history entry in response to some user action.

Ok so this makes sense, kind of, why it would want to do so with a siteclosed subdomain is weird though. Failed to execute 'replaceState' on 'History': A history state object with URL 'https://siteclosed.nordstrom.com/invitation.html' cannot be created in a document with origin 'https://www.nordstrom.com' and URL 'https://www.nordstrom.com/sr/nike-hat'. The invitation.html route leading me to believe that something once used for a signup/offer no longer is, and thusly this problem.

Refused to get unsafe header "ISTL-INFINITE-LOOP"

Googling this yields surprisingly few result... this SO post (opens new window) has a similar body to what this webpage had though. Most of the other returns on google are related to selenium, and that the Nordstrom script might have been there to prevent scraping. It's also using replaceState():

xhr.onload = function() {
 var isValid = xhr.getResponseHeader("ISTL-INFINITE-LOOP")

 if (isValid != null && isValid != '') return

 var a = xhr.getResponseHeader("ISTL-REDIRECT-TO")

 if (a != null && a != '') {
   location.replace(a)
 } else {
   if (
     window.history != null
  && typeof history.replaceState === 'function'
   ) {
     var responseURL = xhr.responseURL != null
       ? xhr.responseURL
       : xhr.getResponseHeader("ISTL-RESPONSE-URL")

   if (responseURL != null && responseURL != '') {
     history.replaceState(null, '', responseURL)
   }
 }
 window.location.reload()
 }
}

I then found what looks like the same code (opens new window) of the nordstrom page on this online html editor here, minus some event uuids.

Still not sure what ISTL means. I just realized I have to go to the doctor's office so maybe I will come back to this. If not I guess I'll never know just how many people could, or could not, potentially also be looking at, and therewith maybe also thinking about buying it meaning less hat for me and more for them... but in the end same # for the Pacific Ocean Patch I suppose. Oh and I think Nike uses slave labor come to mention it. So, don't buy the hat.