SmolSlime

Thanks! Though, I couldn't find the image there. Is it deleted?

Do you know the author's link? Couldn't find it from google.

Youtube's watch history search is weird. I need to type the exact title or it wouldn't show up, meanwhile the other search bar is much more flexible.

YouTube ruined the actual fucking search by polluting it with literally and intentionally irrelevant garbage after like 4 results

I use Piped for that. It could return all result without adding the barely-related videos. https://piped.video is the official instance. There are also other instances.

Damn, didn't expect them to close

Tbf, legality-wise it's a grey area and Reddit is going public, so they're going to clean up nsfw and controversial stuff. But yeah, I understand it sucks most people don't care enough to actually move.

Ahhh, that last part really helped me understand it. So they can add any additional attributes because the links are not escaped properly.

Yeah that makes sense, as that'd be a huge vulnerability. I thought it's similar to your typical cookie stealer malware when you clicked on an infected exe.

That's great news! I just made this post as an additional warning to other users who browse other instances, since the previous post only mentioned sidebar exploit.

Err... is it smspva.com or .eu? Also the .com domain throws an error certificate warning on my browser...

Is that so? I read that roughly a month ago, when there was a Reddit blackout and Jerboa was still very new. Maybe they changed it or I mistook it for another app.

Uh oh.... They said it's a cookie stealer and it even works on comments.

Some apps block Burggit by hardcoding it. IIRC Jerboa also did it, but someone made a fork without the block.