3 ms·
Possible XSS attack on Lemmy instances
- tentacleuno 3y agoThis should have been disclosed responsibly. This could put a lot of instances at risk, which is gold dust for competitors.
- forbiddenlake 3y agoAre you saying the GitHub reporter should have done something different? It was in active use before the report. Lemmy.world, among others, was defaced and redirecting to nsfw sites.
- tentacleuno 3y agoIf it was in use prior to the report, the impact of disclosing it publicly was definitely lessened then.