Comment by 0x0 | Hacker News Reader

Top New Best Ask Show Jobs

Comment by 0x0 | Hacker News Reader

Apparently the long "word" there is some sort of URL set up as [long-domainname][.cc][/long-path]

Twitter indeed detects it as an URL, if you paste it into the tweet composer, but tweet renderer doesn't.

However the tricky question is, how he tweeted that? Twitter's telling me the tweet is too long if I try to tweet the same text.

I would assume that sending that message via the API bypasses some of the same checks the app does. Not sure though.

They seem to have already a mitigation fix in place. Does not work anymore. Gives error 500 on m.twitter.com now.

The app doesn't care though, it just thinks it's an URL and counts the entire string as 23 characters.

And this is why your validation logic should be done on server side...

And this is why your validation logic should also be done on server side...

Reply on news.ycombinator.com