Open LunaLeTuna opened 3 months ago
I think you did a little fliperoo there young lad, the expected behaviour should be to not crash the page.
Interesting, I'll test this at some point.
funny
True lol Not even sure how'd you fix it besides just out right blocking svgs as pfps Guess people also call it a billion laughs attack lmao
You are a furry :333333
Maybe
interesting, I will look into expanding further with this, maybe cause a trillion laughs. Side note, this is also tested on our school instance with discussions, also seems to crash it
Summary: ability to crash the page with svg pfp
Steps to reproduce:
download a image to a eprofile, to make a public file
use api to change pfp to that svg with user[avatar][url]
or just upload to a discussion
Expected behavior: crashes the page
Actual behavior: not crash it
maybe this has been fixed, I did this on my school's instance