@NEETzsche @alex @mint @malakai this is actually why you don't ever want to use blacklists for XSS sanitization because people will just find a way around it. the XSS cat and mouse chase has been going on for decades. the right way to do it is just whitelist and be done with it. same thing goes for fedi, just defed and be done with the problem.