Conversation

Notices

1. þernia (pernia@cum.salon)'s status on Monday, 29-May-2023 15:20:05 JST þernia

   • :btrfly: anime graf mays 🛰️🪐
   • anime graf mays 🛰🪐
   aaa
   •  (mint@ryona.agency)'s status on Monday, 29-May-2023 15:20:03 JST 

     in reply to

     • :btrfly: anime graf mays 🛰️🪐
     • pistolero :thispersondoesnotexist:
     • 
     • anime graf mays 🛰🪐
     @pernia @nimt @p @graf @graf It is, the exploit works, but I've blocked access to .js uploads to prevent it from running.
     Screenshot_20230529_091859.png
   • þernia (pernia@cum.salon)'s status on Monday, 29-May-2023 15:20:05 JST þernia

     in reply to

     • 
     • :btrfly: anime graf mays 🛰️🪐
     • pistolero :thispersondoesnotexist:
     • 
     • anime graf mays 🛰🪐
     @graf @graf cc @nimt @mint @p is this supposed to do anything?
   • pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Monday, 29-May-2023 15:23:38 JST pistolero :thispersondoesnotexist:

     in reply to

     • 
     • 
     • ICScaryThings
     @icst @pernia @mint @nimt Doesn't get through on FSE, apparently.
   • ICScaryThings (icst@clubcyberia.co)'s status on Monday, 29-May-2023 15:23:39 JST ICScaryThings

     in reply to

     • 
     • pistolero :thispersondoesnotexist:
     • 
     @pernia @nimt @p @mint the script it links to is blocked from loading via media proxy, but I think it only fails because of that. The script tags still get through, so still pretty bad (same on your instance too just checked).
   • þernia (pernia@cum.salon)'s status on Monday, 29-May-2023 15:23:40 JST þernia

     in reply to

     • 
     • :btrfly: anime graf mays 🛰️🪐
     • pistolero :thispersondoesnotexist:
     • 
     • anime graf mays 🛰🪐
     @p @nimt @mint what would it do if it did do something? show the popup?
   • pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Monday, 29-May-2023 15:23:41 JST pistolero :thispersondoesnotexist:

     in reply to

     • 
     • 
     @pernia @mint @nimt Didn't do anything here.
   •  (mint@ryona.agency)'s status on Monday, 29-May-2023 15:24:15 JST 

     in reply to

     • pistolero :thispersondoesnotexist:
     • 
     • ICScaryThings
     @p @icst @nimt @pernia Pleroma 2.2 has some different HTML parsing/stripping routines than we have now, so it doesn't work as intended, at least without changes.
   • þernia (pernia@cum.salon)'s status on Monday, 29-May-2023 16:21:01 JST þernia

     in reply to

     • 
     • :btrfly: anime graf mays 🛰️🪐
     • pistolero :thispersondoesnotexist:
     • 
     • anime graf mays 🛰🪐
     @mint @nimt @p @graf @graf why is pleroma so SHIT
      likes this.
   • pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Wednesday, 31-May-2023 01:49:12 JST pistolero :thispersondoesnotexist:

     in reply to

     • 
     • 
     • † top dog :pedomustdie:
     @dcc @mint @nimt @pernia alert("pwnd") or ssmething.
     Machismo likes this.
   • † top dog :pedomustdie: (dcc@annihilation.social)'s status on Wednesday, 31-May-2023 01:49:13 JST † top dog :pedomustdie:

     in reply to

     • 
     • pistolero :thispersondoesnotexist:
     • 
     @p @nimt @pernia @mint what would it be doing if it worked? (i know its that script bug)