• Hotzilla@sopuli.xyz
    1·
    2 years ago

    You can nicely have trampstamp with /body>

    Edit: is there xss risk here because html tag was not visible

    • Hotzilla@sopuli.xyz
      1·
      2 years ago

      <script>alert(“test”)</script>

      Edit: No popup for anyone, right?

      Edit2: script not visible in jerboa, I am scared.

      • henry
        1·
        2 years ago

        It’s just showing as normal text for me. Could be a jerboa bug but I very much doubt they’re allowing randomly injecting html tags lol.