Cannot create a post with a title of "0! = 1"

Nougat, 10 months ago

I was able to make such a post to @lemmy_support from kbin.social without incident.

tiredofsametab, 10 months ago

This is not ideal?

If inputs are not being sanitized properly, it's a huge security risk

urist, 10 months ago

This is what I was worried about but I know just about nothing about lemmy/databases/etc

Deceptichum, 10 months ago

Time for little Bobby Tables to join Lemmy.

Crul, 10 months ago

Reference: xkcd: Exploits of a Mom

https://imgs.xkcd.com/comics/exploits_of_a_mom.png

Her daughter is named Help I’m trapped in a driver’s license factory.

TootSweet, 10 months ago

There is no such things as unsafe text or unsafe characters. Only incorrect and insecure encoding practices. There’s no valid security reason why something like 0 != 1 (or for that matter '); drop table posts; –) should not be allowed as a post title unless the developers are just too lazy or clueless to use parameterized SQL queries and correctly escape the title when including it in an HTML template.

RoundSparrow, 10 months ago

i’m curious about alternate front-end / API clients…

urist, 10 months ago

Oh! Good point.

I was posting this on Firefox on my desktop computer. It’s just the regular website, no front ends. I do have uMatrix but it’s disabled for lemmy (I can’t figure out how to make it work right with lemmy)

Maybe this has something to do with Blahaj? This stuff is real complicated.

14th_cylon, 10 months ago

Lemmy not handling errors is just another Thursday…

can, 10 months ago

I get an error in Sync.

danwardvs, 10 months ago

invalid_post_title error on Memmy on iOS. Seems the error isn’t being handled properly on the web interface. Why it’s an invalid title is the real mystery I suppose.

RoundSparrow, 10 months ago

lemmy-ui is still pretty bad about presenting spinning graphics when encountering an error. As for why the title isn’t rejected, maybe it’s too short, I don’t know the length minimum.

urist, 10 months ago

I think you’re on to something. I think the title doesn’t have enough characters in it of the right sort. These three post titles were rejected:

R

=

==

I was able to make a post titled “===“.

The only conclusion that can be drawn is lemmy is discriminatory against math. Disgusting.