search

revoltchat / autumn

Pluggable file server micro-service.
GNU Affero General Public License v3.0
54 stars 38 forks source link

html execution #8

Closed Reaperx666 closed 3 years ago

ryanalexander commented 3 years ago

Can i get some more details on replicating this bug please.

skybird23333 commented 3 years ago

I can replicate this on Windows 11 Google Chrome, my history is now suspicious

skybird23333 commented 3 years ago

image Instead of being sent as a download the document is sent as a page

skybird23333 commented 3 years ago

You can also reference scripts and stylesheets uploaded to revolt:

https://autumn.revolt.chat/attachments/9YqWMtWkf6PpLpxN9JYDNg-GMvXjgybDPIsmj5e07t/a.html

Reaperx666 commented 3 years ago

Can i get some more details on replicating this bug please.

You can do this by uploading a HTML file to a friend Capture

insertish commented 3 years ago

Closed in 8d128c8555f5ff401c30eca3ecfa22160b276485