Elektrine lite

← Feed

@jerry@infosec.exchange

2026-09-24 20:26 UTC

@buherator@infosec.place if you scroll back to where you were last night (if you know where that was), do you get another pop-up like that? I am wondering if it;s some sort of xss in a post that akkoma isn't handling.

Replies (1)

  • @buherator@infosec.place 2026-09-24 20:36

    @jerry@infosec.exchange It *is* timeline dependent! I had to scroll back more than a day (I stupidly overwritten the original screenshot with the crop, but the timestamp helped). So far I could get this out from some vibe coded event handler in dev tools: "Local Network Access permission required: top-level site “https://infosec.place/”, initiator “https://infosec.place/”, attempting to access target “http://localhost:3000/assets/images/og-card.png” (127.0.0.1:3000) via http. Secure context: True"

    Open ##4836037