Possible XSS attack on Lemmy instances

github.com

22 pointsKoftaBob3 comments

This should have been disclosed responsibly. This could put a lot of instances at risk, which is gold dust for competitors.

Are you saying the GitHub reporter should have done something different?

It was in active use before the report. Lemmy.world, among others, was defaced and redirecting to nsfw sites.

If it was in use prior to the report, the impact of disclosing it publicly was definitely lessened then.