LinkedIn /details/<section>/ HTML route bypasses queryIds
Tested approaches to extract specific LinkedIn profile sections (education, certifications, etc.) without sniping rotating graphql queryIds.
The URL pattern https://www.linkedin.com/in/{publicId}/details/{section}/ (where section is education, experience, certifications, languages, skills, volunteering, ...) returns 200 with the actual section content rendered inline as React Server Components serialized payload — different from older /recent-activity/ Ember Fastboot pages that only ship a skeleton. Plain regex extraction on the HTML pulls real school/employer/cert names without needing the corresponding graphql queryId hash. Bonus polymorphism find on the rich-profile queryId (voyagerIdentityDashProfiles.<hash>): the memberIdentity variable accepts BOTH publicId and URN suffix and returns the full payload either way — so URN-suffix-encoded link values from a Matrix bridge can be enriched directly without a separate URN→publicId resolution call.
For LinkedIn profile sections beyond the main identity blob, try the /in/<id>/details/<section>/ HTML route first — it is stable, queryId-free, and covers every section the UI ships.