Lemmy

12576 readers

2 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago

MODERATORS

nutomic@lemmy.ml

Bug breaking all Javascript functions when loading a post (aussie.zone)

submitted 1 year ago by Threen@aussie.zone to c/lemmy@lemmy.ml

2 comments fedilink hide all child comments

If a post body contains an unclosed HTML tag, it will be automatically closed it at the end of window.isoData and then all Javascript functionality disappears.

you are viewing a single comment's thread
view the rest of the comments

[–] kakes@sh.itjust.works 1 points 1 year ago (1 children)

That's a bit concerning, isn't it? I would think the fact that HTML in the post body is being parsed at all hints at the possibility of an injection attack.

[–] Threen@aussie.zone 1 points 1 year ago* (last edited 1 year ago)

Yeah, very concerning!

I think it is related to this change, so maybe the sanitize is causing the issue here.