23
(URGENT) Lemmy has an XSS vulnerability in the sidebar - sh.itjust.works (sh.itjust.works)
submitted 3 years ago by to c/meta@aussie.zone
36 comments fedilink hide all child comments
 

https://sh.itjust.works/post/923025

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 3 years ago (1 child)

Mine just won't enable it at all. I have it set up on my other account, but this one when I hit save nothing happens.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 3 years ago* (1 child)

    That is one of the issues... if you tick the box to enable 2FA and hit save, you then need to hit F5/refresh for the '2FA Installation link' to appear.

    Actually making use of the 2FA installation link is also not intuitive... as I said I'll try and post a sequence of screenshots tonight with a fresh test account to show the process.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 3 years ago (1 child)

    That didn't work, but I have solved it. I had to take the emoji out of my display name. No idea why that has any impact, but it did.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 3 years ago (2 children)

    i’ll be damned if I’m removing my identity just to protect my account

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 3 years ago (2 children)

    Mine worked with emoji. You can continue to be you.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 3 years ago (1 child)

    The 2FA system might just be prejudiced against birds. I tried putting it back in after it was set up and it won't save my settings if the emoji is there. It's very weird.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 3 years ago (1 child)

    Can you move the bird to the back of your name and test?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (1 child)

    It won't let me put it anywhere in the field. A bagel or a smiley face are find, but I can't do the bird, or a black cat. It might be something to do with the specific emoji - both the black bird and cat are a standard bird/cat paired with a black square which display as a single emoji on some systems.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •