**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 16:46

**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 16:46

as im rolling out lemmy i find out they were 'hacked'

lemmy.world/post/1293336

think ill take my time on this deployment

**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 16:46

**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 16:46

anime graf mays 🛰️🪐 @graf@poa.st

@alex @lain this will interest both of you

**Alex Gleason** @alex@gleasonator.com · Jul 10, 2023, 16:49

**Alex Gleason** @alex@gleasonator.com · Jul 10, 2023, 16:49

Alex Gleason @alex@gleasonator.com

@graf @lain Another XSS vuln, this time thanks to custom emojis. Always validate your schemas, boys. https://github.com/colinhacks/zod

**rees** @rees@breastmilk.club · Jul 10, 2023, 16:51

**rees** @rees@breastmilk.club · Jul 10, 2023, 16:51

rees @rees@breastmilk.club

@alex @lain @graf >Another XSS vuln
feels like the 2000s again

**bonifartius 𒂼𒄄** @bonifartius@social.cleverlibre.org · 2023-07-10T17:33:03Z

bonifartius 𒂼𒄄 @bonifartius@social.cleverlibre.org

@rees @alex @lain @graf
> be tankie
> write lemmy in extra secure rust evangelism
> not sanitize input
> ???
> profit

**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 17:33

**anime graf mays 🛰️🪐** @graf@poa.st · Jul 10, 2023, 17:33

anime graf mays 🛰️🪐 @graf@poa.st

**Zerglingman** @Zerglingman@freespeechextremist.com · Jul 11, 2023, 10:00

**Zerglingman** @Zerglingman@freespeechextremist.com · Jul 11, 2023, 10:00

Zerglingman @Zerglingman@freespeechextremist.com