Viewing a single comment thread. View all comments

nitori OP wrote on July 21, 2023 at 10:04 AM

Hmm let's try adding a span into a link

[<span onload="console.log('Im in your mainframe :3')"></span>](/)

turns into

<span onload="console.log('Im in your mainframe :3')"></span>

nitori OP wrote on July 21, 2023 at 10:29 AM

bold?

[<b onclick="console.log('Im in your mainframe :3')">I should not appear as bold</span>](/)

turns into

<b onclick="console.log('Im in your mainframe :3')">I should not appear as bold</span>

nitori OP wrote on July 21, 2023 at 10:30 AM

cool, no arbitrary element addition