Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/nikclayton/statuses/109799885694021460">Nik (nikclayton@mastodon.social)'s status on Friday, 03-Feb-2023 19:16:30 JST</a><a href="https://mastodon.social/@nikclayton" title="nikclayton@mastodon.social"><img src="https://gnusocial.jp/avatar/93736-48-20240221142552.webp" width="48" height="48" alt="Nik" style="position: absolute; left: 0; top: 0;">Nik</a><div><a href="https://mstdn.social/@trunksapp/109799016855241330" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/94374" title="trunksapp@mstdn.social">trunks.social</a></li></ul></div></section><article><p><a href="https://mstdn.social/@trunksapp">@trunksapp</a> tangent, but don't do what <a href="https://toot.fedilab.app/@apps">@apps</a> does.</p><p>Fedilab has an intent filter like this:</p><p>&lt;data<br>                   android:host="*"<br>                   android:pathPrefix="/@"<br>                   android:scheme="https" /&gt;</p><p><a href="https://github.com/caraesten/Fedilab/blob/develop/app/src/main/AndroidManifest.xml#L138" rel="nofollow noreferrer">https://github.com/caraesten/Fedilab/blob/develop/app/src/main/AndroidManifest.xml#L138</a></p><p>This hijacks non-Mastodon links like <a href="https://medium.com/@kris-nova/why-fix-kubernetes-and-systemd-782840e50104" rel="nofollow noreferrer">https://medium.com/@kris-nova/why-fix-kubernetes-and-systemd-782840e50104</a> and tries to open them in Fedilab.</p><p>This obviously fails, and is obnoxious when it happens.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/1138438#notice-2455888">In conversation</a><time datetime="2023-02-03T19:16:30+09:00" title="Friday, 03-Feb-2023 19:16:30 JST">Friday, 03-Feb-2023 19:16:30 JST</time> <span>from <span><a href="https://mastodon.social/@nikclayton/109799885694021460" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@nikclayton/109799885694021460">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/caraesten/Fedilab/blob/develop/app/src/main/AndroidManifest.xml#L138This">Fedilab/AndroidManifest.xml at develop · caraesten/Fedilab</a></h5><div></div></header><div>Fedilab is a multifunctional Android client to access the distributed Fediverse, consisting of microblogging, photo sharing and video hosting - Fedilab/AndroidManifest.xml at develop · caraesten/Fe...</div><footer></footer></article></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/678738">Untitled attachment</a></label><br></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Nik (nikclayton@mastodon.social)'s status on Friday, 03-Feb-2023 19:16:30 JSTNik
in reply to
- Fedilab Apps
- trunks.social
@trunksapp tangent, but don't do what @apps does.
Fedilab has an intent filter like this:
<data
                   android:host="*"
                   android:pathPrefix="/@"
                   android:scheme="https" />
https://github.com/caraesten/Fedilab/blob/develop/app/src/main/AndroidManifest.xml#L138
This hijacks non-Mastodon links like https://medium.com/@kris-nova/why-fix-kubernetes-and-systemd-782840e50104 and tries to open them in Fedilab.
This obviously fails, and is obnoxious when it happens.
In conversationFriday, 03-Feb-2023 19:16:30 JST from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  Fedilab/AndroidManifest.xml at develop · caraesten/Fedilab
  Fedilab is a multifunctional Android client to access the distributed Fediverse, consisting of microblogging, photo sharing and video hosting - Fedilab/AndroidManifest.xml at develop · caraesten/Fe...
2. Untitled attachment

Public

Embed Notice

HTML Code

Corresponding Notice