search

BinaryQuantumSoul / discord-latex

BetterDiscord plugin using MathJax to render LaTeX
Apache License 2.0
4 stars 0 forks source link

CSS injection #3

Open eMGeeneer opened 1 week ago

eMGeeneer commented 1 week ago

It is possible to perform CSS injection with the same technique as was used on github. For example: $$\ce{$\unicode[goombafont;cursor: all-scroll;]{x0000}$}$$ will create a box where the cursor changes icons

https://github.com/BinaryQuantumSoul/discord-latex/assets/145163394/15e376cc-5c05-4801-8b8c-832f38369420

BinaryQuantumSoul commented 1 week ago

Thank you!

Temporary fix by removing \unicode from all tex codes, since it's hardly ever used. Tell me if you have a more long term fix idea.