Jump to content

Recommended Posts

Posted (edited)

So, Cloudflare said I was blocked, but I can still access the Shard just fine. I was blocked on my PC, but I'm currently typing this on my PC. (I have to admit, it was a bit of a jumpscare lol.) So, basically my question is if I have anything to worry about, or if I can keep using the Shard as-is, since it is working fine even though it gave me the block screen. Also the reason it blocked me is because I somehow accidentally inserted some link from the text editor menu (I think it was the bulleted list one?) when replying to a status update. It looked like: ./somethingAboutBulletedLists (and was the blue color of a link). I don't remember if it had the period at the start or not, or what exactly it said. I think it was like how you can click and drag on a link (e.g., the "Add Tags..." button) and move your cursor to a textbox, then release and it puts the link there. I can't seem to do it again, so I don't know what happened. Also it only gave me the error once I tried to post the SU reply. And the reason I left the link there was because it looked cool and weird. That's literally my reasoning.

So, do I have to worry or can I just ignore this?

Spoiler

image.thumb.png.fabbd5f0b73b1ccf464896f141991637.png

Ray ID: 9c4392919c69633e

 

Edit: Also in case it's relevant, I don't use a VPN.

Edited by Theory
Posted

I have seen this multiple times.

Once when I was trying to use the code thing and adding a script tag

Another when I was tinkering with inspect and tried adding a button

I don't know for sure, but I don't believe it is anything to worry about.

Posted (edited)
2 minutes ago, KaladinsSenseOfHumourSpren said:

I have seen this multiple times.

Once when I was trying to use the code thing and adding a script tag

Another when I was tinkering with inspect and tried adding a button

I don't know for sure, but I don't believe it is anything to worry about.

Probably just doesn't want you to insert js (and if u hover over the RTE btns, they are all js void "links")

Yeah, I've thought about using inspect to add HTML to posts, but idk if they'd filter it out or anything.

Also I can see why script would not be allowed lol

Edited by Theory
Posted
2 minutes ago, Theory said:

Probably just doesn't want you to insert js (and if u hover over the RTE btns, they are all js void "links")

Yeah, I've thought about using inspect to add HTML to posts, but idk if they'd filter it out or anything.

Also I can see why script would not be allowed lol

I was using this

<h1>Hello World</h1>

It wouldn't let me add a script tag

It doesn't even let me type script with the <> around it

Posted (edited)
19 minutes ago, KaladinsSenseOfHumourSpren said:

I was using this

<h1>Hello World</h1>

Wdym? I don't understand why you're saying what HTML u were tryna do.

19 minutes ago, KaladinsSenseOfHumourSpren said:

It wouldn't let me add a script tag

It doesn't even let me type script with the <> around it

If it did, XSS go brrrrr

or smth

Edited by Theory
Posted (edited)
9 minutes ago, Theory said:

Wdym? I don't understand why you're saying what HTML u were tryna do.

I was typing the OP for this:

I was trying to put the console.log in a script tag in the HTML, but it didn't let me

Edited by KaladinsSenseOfHumourSpren
Posted
9 minutes ago, KaladinsSenseOfHumourSpren said:

I was trying to put the console.log in a script tag in the HTML, but it didn't let me

Bro do you even understand the implications of that? No one is gonna allow users to post js/script tags. They are at least gonna make efforts to prevent them from doing so. Why? Because, picture this:

I put a script tag here:

(insert invisible script tag into this post's HTML)

so now, whenever someone loads this page and that script tag, it would run. Then, I could "do something bad."

Anyway idk how much I should be talking about this here.

Also I don't know that much abt this stuff, but I'm also kinda into webdev, so I know a bit.

Posted
1 minute ago, Theory said:

Bro do you even understand the implications of that? No one is gonna allow users to post js/script tags. They are at least gonna make efforts to prevent them from doing so. Why? Because, picture this:

I put a script tag here:

(insert invisible script tag into this post's HTML)

so now, whenever someone loads this page and that script tag, it would run. Then, I could "do something bad."

Anyway idk how much I should be talking about this here.

Also I don't know that much abt this stuff, but I'm also kinda into webdev, so I know a bit.

No

Like script tag in this

<!DOCTYPE html>
<html>
  <head>
    <title>Hello</title>
  </head>
  <body>
  </body>
  <!--script-->
</html>

If it wasn't in a comment and I put the <> around it, it doesn't work

Posted
2 minutes ago, KaladinsSenseOfHumourSpren said:

No

Like script tag in this

<!DOCTYPE html>
<html>
  <head>
    <title>Hello</title>
  </head>
  <body>
  </body>
  <!--script-->
</html>

If it wasn't in a comment and I put the <> around it, it doesn't work

Well...maybe they just have good sanitization. Or an overlook. Or just being safe. You never know when someone might find an exploit and "escape" the script tag or smth, if you catch my drift.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...