Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://crag.social/users/devnull/statuses/111773846251691565">Julian Lam (devnull@crag.social)'s status on Thursday, 18-Jan-2024 22:01:59 JST</a><a href="https://crag.social/@devnull" title="devnull@crag.social"><img src="https://gnusocial.jp/avatar/116369-48-20230728194346.webp" width="48" height="48" alt="Julian Lam" style="position: absolute; left: 0; top: 0;">Julian Lam</a><div><a href="https://cosocial.ca/@evan/111772908651428046" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/230475" title="daniel@mstdn.degu.cl">Daniel Hernández</a></li></ul></div></section><article><p><a href="https://cosocial.ca/@evan">@evan</a> <a href="https://mstdn.degu.cl/@daniel">@daniel</a> <a href="https://evanp.me/author/evanprodromou/">@evanprodromou</a> unrelatedly, <a href="https://crag.social/tags/nodebb" rel="tag">#nodebb</a> sanitizes post content too, and I did think it was a little weird that <a href="https://crag.social/tags/ActivityPub" rel="tag">#ActivityPub</a> sends HTML back and forth.</p><p>It all boils down to never trusting user input (that includes input from servers acting as intermediaries!)</p><p>I would rather see <a href="https://crag.social/tags/markdown" rel="tag">#markdown</a> passed around, but that's just me 😊</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2601609#notice-5157767">In conversation</a><time datetime="2024-01-18T22:01:59+09:00" title="Thursday, 18-Jan-2024 22:01:59 JST">Thursday, 18-Jan-2024 22:01:59 JST</time> <span>from <span><a href="https://crag.social/@devnull/111773846251691565" rel="external" title="Sent from crag.social via ActivityPub">crag.social</a></span></span><a href="https://crag.social/@devnull/111773846251691565">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="http://forth.It/">speeds.it</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Julian Lam (devnull@crag.social)'s status on Thursday, 18-Jan-2024 22:01:59 JSTJulian Lam
in reply to
- Evan Prodromou
- Daniel Hernández
@evan @daniel @evanprodromou unrelatedly, #nodebb sanitizes post content too, and I did think it was a little weird that #ActivityPub sends HTML back and forth.
It all boils down to never trusting user input (that includes input from servers acting as intermediaries!)
I would rather see #markdown passed around, but that's just me 😊
In conversationThursday, 18-Jan-2024 22:01:59 JST from crag.socialpermalink
Attachments
1. No result found on File_thumbnail lookup.
  speeds.it

Public

Embed Notice

HTML Code

Corresponding Notice