Looks like the instance is on the latest RC which includes the fix for the vulnerability.

Realizing this blew my mind. Definitely more interesting than following people.

What kind of terrible markdown editor allows adding onload scripts to images though… it’s insane.

I’d be willing to bet they’re using the API to make all the changes. The cookie has the jwt token. I don’t believe you need the username (at least judging by the js API docs).

Looks like it’s issuing a GET to https://zelensky.zip/save/{ENCODED_JWT_TOKEN_AND_NAV_FLAG}. The ENCODED_JWT_TOKEN is from btoa(document.cookie+nav_flag) where nav_flag is essentially 'navAdmin' if the account hit is an admin or '' if the user hit is not an admin (it checks if the admin button in the nav exists). Their server is likely logging all incoming requests and they just need to do a quick decoding to get jwt tokens and a flag telling them if it’s an admin account.

I’d be hesitant to visit Lemmy on a browser atm 😓

Extra content in exchange for an upvote 🤔

Yep, Lemmy is filling a Reddit-shaped hole. It’s a bit different but nice.

Confirmed fixed, thank you!

If that’s the case then that’s a bug too, that’s not a requirement in Lemmy. You can post to any community regardless of subscription.

However, I am subscribed to this community. If Connect is incorrectly requiring subscription to post then there’s a bug there as well.

I was able to post here via Jerboa after all.

Try searching for https://lemdro.id/c/askandroid from vlemmy. You might be the first subscriber on that instance.

Connect is ridiculously stable and feature-complete for how new it is. Definitely deserves to be mentioned.

Thanks for the tip about brewing time, went with ~16 hours and it was plenty strong. Probably would’ve hated it at 24hrs 😅

ooooooh I can’t be trusted around an open can of condensed milk… I’ll keep the suggestion in mind, sounds delicious. TY!

The pace of development is incredible. Thank you! 👏🙇‍♂️

Jerboa has this feature, the transition stutters a bit though.

I wouldn’t, that’s just where the bot dumps/mirrors r/citiesskylines no? Says there’s two active users a week

The icon! 🤩

Swiping to go back is perfection. Thank you!

Around here they sell the drink with seeds and all. It’s very delicious.

The scones idea is super interesting 🤔

Thank you! Yeah, I know it as maracuyá also. It’s my first time growing it so I appreciate the info about harvesting. I’m a little surprised that I should wait so long though 😅 I guess I hadn’t researched the harvesting portion yet.

I’ve only had it as an agua fresca drink, so I’m really looking forward to tasting just the fruit.

I see this on dark theme too. Luckily on the amoled theme there’s no issue.