(URGENT) Lemmy has an XSS vulnerability in the sidebar - sh.itjust.works (sh.itjust.works)

submitted 2 years ago by eatham@sh.itjust.works to c/meta@aussie.zone

36 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] RustyRaven@aussie.zone 3 points 2 years ago

The 2FA system might just be prejudiced against birds. I tried putting it back in after it was set up and it won't save my settings if the emoji is there. It's very weird.

[-] Treevan@aussie.zone 1 points 2 years ago

Can you move the bird to the back of your name and test?

[-] RustyRaven@aussie.zone 2 points 2 years ago

It won't let me put it anywhere in the field. A bagel or a smiley face are find, but I can't do the bird, or a black cat. It might be something to do with the specific emoji - both the black bird and cat are a standard bird/cat paired with a black square which display as a single emoji on some systems.

[-] lodion@aussie.zone 1 points 2 years ago

At a guess your emoji is part of a a newer unicode table and something in the lemmy backend has an older version that doesn't include it.

this post was submitted on 10 Jul 2023

23 points (100.0% liked)

Meta