this post was submitted on 13 Mar 2024
15 points (100.0% liked)

AniSocial Meta

218 readers
1 users here now

Welcome to the AniSocial Lemmy community!

This is a space for meta discussions about our instance and ways to improve our community. Share your ideas, feedback, suggestions, and questions with us here.

Important announcements may also be found here.


Rules

  1. All posts must be related to the AniSocial website.

  2. Be kind and respectful to one another.

  3. Do not impersonate another person or entity.

  4. Do not create announcement posts if you are not an admin.


Helpful links

founded 1 year ago
MODERATORS
 

Hello,

When I visit this post https://ani.social/post/2611163 my browser downloads a random file called "master.m3u8"

I'm running firefox 115.8.0esr with the darkly-red theme for lemmy.

With this option enabled "Auto expand media".

The offending line appears to be the following: <iframe class="post-metadata-iframe" allowfullscreen="true" src="https://prod.vodvideo.cbsnews.com/cbsnews/vr/hls/2024/03/11/2317151299662/2750480_hls/master.m3u8" title="House Democrats try to force floor vote on foreign aid for Ukraine, Israel, Taiwan"></iframe>

From a security perspective, using a iframe to anything posted seems dubious?

top 4 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 5 months ago

That's strange. It happens to me on Chromium too. Other instances don't seem to be affected by this. I'll look into it over the weekend. Thanks for letting us know.

[–] [email protected] 2 points 2 months ago (1 children)
[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

Thanks for letting me know. I'll have a look again today. I made changes when we migrated so that might be the cause.

edit: It looks like this is an issue in 0.19.4 for servers that disable external image cache. lemmy.cafe (0.19.4) has this issue but mander.xyz (0.19.3) does not. I'll see what I can do.

editedit: HOPEFULLY its fixed now(?) I disabled iframes. Lemmy is weird. Sometimes it wants to load the iframe. Sometimes it doesn't. I don't really understand what's going on to be honest.

[–] [email protected] 1 points 5 months ago* (last edited 5 months ago)

Hi, I'm the OP for that post.

I tried to change the link to a non-amp link to see if that would help, but Lemmy isn't letting me save it.

Let me try turning off auto-expand to see if it lets me update.

edit: Nope, I can't change to a non-amp link, even with auto-expand turned off