cross-posted from: https://sh.itjust.works/post/923025

lemmy.world is a victim of an XSS attack right now and the hacker simply injected a JavaScript redirection into the sidebar.

It appears the Lemmy backend does not escape HTML in the main sidebar. Not sure if this is also true for community sidebars.

    • minnieo@kbin.social
      link
      fedilink
      arrow-up
      7
      ·
      1 year ago

      why is your entire account dedicated to sucking reddit’s asshole. do you like the taste of corporate shit?

      • XiELEd@kbin.social
        link
        fedilink
        arrow-up
        6
        ·
        edit-2
        1 year ago

        Yeah it’s so weird, why make an account here if he likes Reddit so much? We just want to have another place to have communities, that’s why we left and stayed here. He should do the same, stay there and out of here if he hates this place so much.

        • minnieo@kbin.social
          link
          fedilink
          arrow-up
          5
          ·
          1 year ago

          it’s honestly pathetic. he hates it here so much that he spends 95% of his free time here making comments about how much better reddit is hahaha. he seems addicted to this place and addicted to the taste of shiny black boots

          • XiELEd@kbin.social
            link
            fedilink
            arrow-up
            4
            ·
            1 year ago

            I mean I get that he’s in some sort of one-way findom relationship with spez but that should be done without harassing other people— we didn’t consent to it.