15
submitted 6 months ago by [email protected] to c/[email protected]

Hello,

When I visit this post https://ani.social/post/2611163 my browser downloads a random file called "master.m3u8"

I'm running firefox 115.8.0esr with the darkly-red theme for lemmy.

With this option enabled "Auto expand media".

The offending line appears to be the following: <iframe class="post-metadata-iframe" allowfullscreen="true" src="https://prod.vodvideo.cbsnews.com/cbsnews/vr/hls/2024/03/11/2317151299662/2750480_hls/master.m3u8" title="House Democrats try to force floor vote on foreign aid for Ukraine, Israel, Taiwan"></iframe>

From a security perspective, using a iframe to anything posted seems dubious?

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 2 points 3 months ago
[-] [email protected] 2 points 3 months ago* (last edited 3 months ago)

Thanks for letting me know. I'll have a look again today. I made changes when we migrated so that might be the cause.

edit: It looks like this is an issue in 0.19.4 for servers that disable external image cache. lemmy.cafe (0.19.4) has this issue but mander.xyz (0.19.3) does not. I'll see what I can do.

editedit: HOPEFULLY its fixed now(?) I disabled iframes. Lemmy is weird. Sometimes it wants to load the iframe. Sometimes it doesn't. I don't really understand what's going on to be honest.

this post was submitted on 13 Mar 2024
15 points (100.0% liked)

AniSocial Meta

266 readers
1 users here now

Welcome to the AniSocial Lemmy community!

This is a space for meta discussions about our instance and ways to improve our community. Share your ideas, feedback, suggestions, and questions with us here.

Important announcements may also be found here.


Rules

  1. All posts must be related to the AniSocial website.

  2. Be kind and respectful to one another.

  3. Do not impersonate another person or entity.

  4. Do not create announcement posts if you are not an admin.


Helpful links

founded 1 year ago
MODERATORS