andi

andi -

For one week you could break Mastodon by posting a link whose OpenGraph title was the Communist Manifesto

The developers of "vanilla" Mastodon also run mastodon.social and they kind of use it almost like a staging server for the software as published on Github, often running nightly builds. For example, last Sunday a build was pushed with a new layout for link previews where the link title was displayed in large text instead of inset in a box like it used to be. This change appears to have been based on a whim of the project lead and was immediately somewhat controversial (seemingly even with other members of the development team). Anyway, I noticed these title previews didn't seem to have a specific limit on their length. To test, I created a test page [https://data.runhello.com/og/longtitle/] consisting of a single line of text plus OpenGraph tags, whose OpenGraph title was the complete text of the Communist Manifesto¹. I discovered that in fact anytime you posted this link on Mastodon it would print the entire 6,000 line title in h3 text directly into the feed with no way to hide or collapse it. There's a video here showing how long this takes to scroll through [https://mastodon.social/@mcc/110810455594568192] (50 seconds). The bug has been fixed [https://github.com/mastodon/mastodon/issues/26176] as of this morning. ---------------------------------------- ¹ Not actually complete, I omitted section 3 as it has complex formatting.

开发者们在mastodon.social上运行着“原始”Mastodon,并将其用作软件的暂存服务器。上周日推送了一个新的链接预览布局的构建,引起了争议。标题预览没有长度限制。测试发现,发布链接时会直接打印完整的6000行标题到动态中。这个错误已在今天上午修复。

Mastodon 争议 修复 链接预览 长度限制

相关推荐 去reddit讨论

热榜 Top10

LigaAI
LigaAI
eolink
eolink
观测云
观测云
Dify.AI
Dify.AI

推荐或自荐