Attempting to create a post with a title of “0! = 1” causes lemmy to stall, with the create post button remaining as a little spinning circle and no error messages.
I was posting this on Firefox on my desktop computer. It’s just the regular website, no front ends. I do have uMatrix but it’s disabled for lemmy (I can’t figure out how to make it work right with lemmy)
Maybe this has something to do with Blahaj? This stuff is real complicated.
invalid_post_title error on Memmy on iOS. Seems the error isn’t being handled properly on the web interface. Why it’s an invalid title is the real mystery I suppose.
lemmy-ui is still pretty bad about presenting spinning graphics when encountering an error. As for why the title isn’t rejected, maybe it’s too short, I don’t know the length minimum.
There is no such things as unsafe text or unsafe characters. Only incorrect and insecure encoding practices. There’s no valid security reason why something like 0 != 1 (or for that matter '); drop table posts; –) should not be allowed as a post title unless the developers are just too lazy or clueless to use parameterized SQL queries and correctly escape the title when including it in an HTML template.
Add comment