Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://hails.org/users/hailey/statuses/114618621907081062">Hailey (hailey@hails.org)'s status on Tuesday, 03-Jun-2025 22:09:36 JST</a><a href="https://hails.org/@hailey" title="hailey@hails.org"><img src="https://gnusocial.jp/avatar/103362-48-20240818151033.webp" width="48" height="48" alt="Hailey" style="position: absolute; left: 0; top: 0;">Hailey</a></section><article><p>shot, chaser</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5143247#notice-10088671">In conversation</a><time datetime="2025-06-03T22:09:36+09:00" title="Tuesday, 03-Jun-2025 22:09:36 JST">about 16 days ago</time> <span>from <span><a href="https://hails.org/@hailey/114618621907081062" rel="external" title="Sent from hails.org via ActivityPub">hails.org</a></span></span><a href="https://hails.org/@hailey/114618621907081062">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/4722550">The "Written using Claude" section of the readme at https://github.com/cloudflare/workers-oauth-provider/</a></label><br><a href="https://social.hails.org/system/media_attachments/files/114/618/614/757/156/252/original/437e45cc8550e38b.png" rel="external">https://social.hails.org/system/media_attachments/files/114/618/614/757/156/252/original/437e45cc8550e38b.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/4722551">CVE-2025-4143 description with the highlighted text "Readers who are familiar with OAuth may recognize that failing to check redirect URIs against the allowed list is a well-known, basic mistake, covered extensively in the RFC and elsewhere. The author of this library would like everyone to know that he was, in fact, well-aware of this requirement, thought about it a lot while designing the library, and then, somehow, forgot to actually make sure the check was in the code. That is, it's not that he didn't know what he was doing, it's that he knew what he was doing but flubbed it."</a></label><br><a href="https://social.hails.org/system/media_attachments/files/114/618/619/199/367/215/original/02fa2fb7baf4bcdf.png" rel="external">https://social.hails.org/system/media_attachments/files/114/618/619/199/367/215/original/02fa2fb7baf4bcdf.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Hailey (hailey@hails.org)'s status on Tuesday, 03-Jun-2025 22:09:36 JST Hailey
shot, chaser
In conversationabout 16 days ago from hails.orgpermalink
Attachments
1. The "Written using Claude" section of the readme at https://github.com/cloudflare/workers-oauth-provider/
  https://social.hails.org/system/media_attachments/files/114/618/614/757/156/252/original/437e45cc8550e38b.png
2. CVE-2025-4143 description with the highlighted text "Readers who are familiar with OAuth may recognize that failing to check redirect URIs against the allowed list is a well-known, basic mistake, covered extensively in the RFC and elsewhere. The author of this library would like everyone to know that he was, in fact, well-aware of this requirement, thought about it a lot while designing the library, and then, somehow, forgot to actually make sure the check was in the code. That is, it's not that he didn't know what he was doing, it's that he knew what he was doing but flubbed it."
  https://social.hails.org/system/media_attachments/files/114/618/619/199/367/215/original/02fa2fb7baf4bcdf.png

Public

Embed Notice

HTML Code

Corresponding Notice