62
submitted 6 months ago* (last edited 6 months ago) by psycocan@lemmy.ml to c/jerboa@lemmy.ml
top 12 comments
sorted by: hot top controversial new old
[-] Max_P@lemmy.max-p.me 19 points 6 months ago

Those instances are still on Lemmy 0.18 where the bug got introduced, not a Jerboa problem. Literally all the apps and frontends were affected.

[-] sabreW4K3@lemmy.tf 11 points 6 months ago

I haven't noticed that & I check quite a lot. I guess I need to take more time & check more. Anyway, this sounds like a bug. Maybe you should go & report it on Github & let me know when you get back.

[-] psycocan@lemmy.ml 7 points 6 months ago

I have frequently seen it in OPs. Updating my OP

[-] sabreW4K3@lemmy.tf 7 points 6 months ago

Oh, the ampersand bug

[-] Gormadt@lemmy.blahaj.zone 2 points 6 months ago* (last edited 6 months ago)

Yes, all the time

It's pretty annoying

Edit: Not sure why this landed as a reply to this comment when it was supposed to be a reply to the thread. That's a new one.

[-] sabreW4K3@lemmy.tf 4 points 6 months ago

I can see all these 0.0.59

[-] Scubus@sh.itjust.works 0 points 6 months ago

Pretty sure he's trolling and has them actually written out

[-] Treczoks@lemm.ee 5 points 6 months ago

Not only on Jerboa. Basically all titles are affected, and it is not only the ampersand which is an issue.

[-] SatyrSack@lemmy.one 4 points 6 months ago

Eternity here, but same thing. I also see a lot of < and such

[-] LEDZeppelin@lemmy.world 2 points 6 months ago

Same for Memmy

[-] testEmailVerified@lemmy.world 2 points 6 months ago

That was a bug in a lemmy 0.18.X, where it introduced sanitation against XSS. After XSS attack had happened. Which was introduced with the custom smiley feature, which allowed arbitary js to be executed on every client.

Which then was removed in 0.19. When I had discussion with the Lemmy devs that this responsibility lays on the clients to properly santize this. (Display text as text, fault layed in Lemmy UI)

[-] Noodle07@lemmy.world 1 points 6 months ago

All the time, is a little annoying

this post was submitted on 22 Feb 2024
62 points (94.3% liked)

Jerboa

10133 readers
1 users here now

Jerboa is a native-android client for Lemmy, built using the native android framework, Jetpack Compose.

Warning: You can submit issues, but between Lemmy and lemmy-ui, I probably won't have too much time to work on them. Learn jetpack compose like I did if you want to help make this app better.

Built With

Features

Installation / Releases

Support / Donate

Jerboa is made by Lemmy's developers, and is free, open-source software, meaning no advertising, monetizing, or venture capital, ever. Your donations directly support full-time development of the project.

Crypto

Contact

founded 2 years ago
MODERATORS