4 ms·
There's an interesting comment from a moderator(?) in the comment section: > However, part of your comment can not be shown as you had used a character opening
by xcdzvyn 3y ago
There's an interesting comment from a moderator(?) in the comment section:
> However, part of your comment can not be shown as you had used a character opening a HTML tag rendering a whole sentence like an invalid HTML instruction.
It appears this article reveals _two_ bugs.
- mdwalters 3y agoThey should have thought about XSS mitigation...
- jhugo 3y agoAVHerald is quite a... special... website. It strips anything that looks like a URL or HTML tag from the comments in a way that typically removes the rest of the comment (or sometimes only part of it), with frequent false positives and mangled comments. Until recently it didn't support HTTPS, and it still doesn't redirect HTTP to HTTPS, with the justification being that HTTPS increases server load. The heading "The Aviation Herald" at the top only links you back to the homepage if you have JS enabled, for reasons that were described to me but were too incomprehensible for me to remember. Of course virtually every other website around solves these problems in more effective ways, but AVHerald has its own style. Regardless, you are into aviation it's one of the best sources around for incident and accident reports.