4 ms·
I would assume that sending that message via the API bypasses some of the same checks the app does. Not sure though.
by enzanki_ars 9y ago
I would assume that sending that message via the API bypasses some of the same checks the app does. Not sure though.
- mablae 9y agoThey seem to have already a mitigation fix in place. Does not work anymore. Gives error 500 on m.twitter.com now.
- xPaw 9y agoThe app doesn't care though, it just thinks it's an URL and counts the entire string as 23 characters.
- mschuster91 9y agoAnd this is why your validation logic should be done on server side...
- justboxing 9y agoAnd this is why your validation logic should also be done on server side...