Moved to BSky: @jenga.dog

BSky: @jenga.dog

[Ellie✨♥️🥂✡️🏳️‍⚧️🔆 @EllieGabalus]

Your Party Guide for this November

[—————————————————————————————————————————dash🏴‍☠️ @da5ch0]

particularly relevant today, as some of y’all already tweeting about crimes you plan to commit. please, keep those thoughts inside your head

[QueenGrits نحلة @quarantinebee]

Lol this gen z vs millennial bs doesn’t exist in real life. Media working overtime to create feuds between groups of people whose economic and social interests are aligned do not be fooled

[🌱 MK/RET @ 🦋 @retquits]

easily one of my stupider deaths in botw

[Moved to BSky: @jenga.dog @JengaReinwolf]

I'm unsure of the scope of the problem. It's not uncommon for sites to consider signouts to be non-sensitive, and the HTML injection may just expose that. But in my opinion it just suggests other issues may be present. This also ties into the last issue I'm seeing...

[Moved to BSky: @jenga.dog @JengaReinwolf]

The next thing is the lack of CSRF tokens. These are tokens that help ensure a user is initiating an action of their own volition.
The ability to be signed out by a link is a problem.
Worst case, you could have sensitive account info changed by a link.

[Naoma 🍣🐺 Werewolf vtuber/artist🏳️‍⚧️ @SushiSusii]

To all my US friends and followers. This is really important and could literally wipe away all of your medical bills.