Conversation

Notices

1. Embed this notice
   Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 03:22:49 JST Fedilab Apps

   When the markdown feature is turned on, messages having non Latin chars can have issues with clickable elements.
   We fixed it today and it will be available in the next release. #Fedilab

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 04:13:57 JST Fedilab Apps

     in reply to

     • Kevin Russell

     @kevinrns
     Long press a link with the app to have all information.

   • Embed this notice
     Kevin Russell (kevinrns@mstdn.social)'s status on Tuesday, 22-Aug-2023 04:13:58 JST Kevin Russell

     in reply to

     @apps

     Fixed it meaning what? Will non latin characters be used to misdirect links? Will links be visible beside url hiding? Or are hidden links staying hidden?

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 04:19:31 JST Fedilab Apps

     in reply to

     • Zekovski 🦫

     @Zekovski
     No, we missed it. That was something we had to fix. Thank you so much for your contribution!

   • Embed this notice
     Zekovski 🦫 (zekovski@pouet.chapril.org)'s status on Tuesday, 22-Aug-2023 04:19:32 JST Zekovski 🦫

     in reply to

     @apps
     Hi ! 👋
     I made a PR some days ago. Just wanted to know if you saw it ?

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 05:00:27 JST Fedilab Apps

     in reply to

     • Kevin Russell

     @kevinrns
     There is more than one problem :)
     But you can disable Markdown in settings.

   • Embed this notice
     Kevin Russell (kevinrns@mstdn.social)'s status on Tuesday, 22-Aug-2023 05:00:28 JST Kevin Russell

     in reply to

     @apps

     Yeah, no, thats not a recipe for safe surfing. No.

     Not at all. Crummy, bad code, bad design, bad UI.

     No.

     Fuck no.

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 05:27:37 JST Fedilab Apps

     in reply to

     • Paco Velobs

     @PacoVelobs
     Yes, still not available on fdroid though

   • Embed this notice
     Paco Velobs (pacovelobs@mamot.fr)'s status on Tuesday, 22-Aug-2023 05:27:39 JST Paco Velobs

     in reply to

     @apps
     Wait. Fedilabs support mardown rendering?
     Why am i always late to the party?

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 06:34:58 JST Fedilab Apps

     in reply to

     • Kevin Russell

     @kevinrns
     But what URLs will be hidden? If no text is associated we can discard them and also they won't be clickable and never loaded. Please, give us more details so we can fix any potential issues.

   • Embed this notice
     Kevin Russell (kevinrns@mstdn.social)'s status on Tuesday, 22-Aug-2023 06:35:00 JST Kevin Russell

     in reply to

     @apps

     Seriously!?

     The standard for Mastodon is going to be hiding _____
     urls?

     What a stupid idea. What an anti 'user' safety choice.

     Which is te top STUPID IDEA. Join up with meta OR lets hide urls.

     Safety on Mastodon, hell safety in the entire fediverse, will NEVER get in your way.

     With thousands of servers run by randos, and zero safety standards, you can be sure to get the latest ransomware .

     "Safety Will Never Get In Your Way!"

     "With Mastodon, Digital Security Is Job Null!"

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 06:38:02 JST Fedilab Apps

     in reply to

     • Kevin Russell

     @kevinrns
     If they are hidden (ie: no visible text to tap), there will be no clickable links and nothing will be loaded.
     We need to understand your concern.
     Could you please explain with a simple vulnerability example so we can fix it?

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Tuesday, 22-Aug-2023 08:40:57 JST Fedilab Apps

     in reply to

     • Kevin Russell

     @kevinrns
     Currently, there is no security issue. Could you bring one to us so we can fix it? Thank you.

   • Embed this notice
     Kevin Russell (kevinrns@mstdn.social)'s status on Tuesday, 22-Aug-2023 08:40:59 JST Kevin Russell

     in reply to

     @apps

     <badcode>

     <A href = "hhtp//:www.look.com.liars.co/websitefilledwithmallware.bin">Look at this that thing we were just talking about"</a>

     </ badcode>
     ??

     Produces

     "Look at this that thing we were just talking about"
     \
     And a hidden url beneath.

     Mastodon should show:

     "Look at this that thing we were just talking about" [hhtp//:www.look.com.liars.co/websitefilledwithmallware.bin] in plaintext