This is a javascript link (created on current 0.18.1-rc.x)
Open link in next tab
javascript:alert('Hiho!')
Security issue with post URLs not being validated/sanitized
- Issue: https://github.com/LemmyNet/lemmy/issues/3505
- PR: https://github.com/LemmyNet/lemmy/pull/3508
- Fixed in: https://github.com/LemmyNet/lemmy/releases/tag/0.18.1-rc.10
Since this will most likely only be merged to main and the upcoming 0.18.1 release (candidates), it will put additional pressure on actual releasing 0.18.1 and updating the existing lemmy instances.