Hii so basically server doesn’t check if the emoji sent by the client is valid so the client is able to change “title” and “alt” attributes for the emoji <img with inspect element and send a custom message in an emoji, for someone not experienced with computers it may seem like the person wrote the…

Not following, can you reply with an example? This looks like retort which is not an official plugin. Discourse reactions renders differently.

Ah, so it’s an external plugin, I had no idea. Yes, it seems to be retort from the body of the request when reacting with emoji.

Feature request: Prevent manipulation opened 11:44AM - 10 Sep 20 UTC (UTC) [图片] DoomDesign bug When using the plugin with a…

For future travelers here, our official plugin is: [图片] Discourse Reactions Plugin discourse2 Summary Discourse Reactions allows users to React to a post from a choice of emojis, rather than only the Like heart. The available emoji selection can be set from t…

Discourse retort表情符号可能存在的安全问题

支持

sam (Sam Saffron) 2022 年5 月 15 日 23:45 7

对于未来的旅行者，我们的官方插件是：

此问题不影响官方插件。

4 个赞

话题		回复	浏览量
I don't know if this is my delusion or if it really existed Support	6	674	2023 年5 月 16 日
Discourse Retort Plugin end-of-life	480	66943	2025 年8 月 19 日
Reaction emojis Support	4	1140	2024 年1 月 15 日
Add ... option to Discourse Reactions Feature reactions	29	2847	2025 年10 月 5 日
Discourse Reactions Plugin official , included-in-core , reactions	56	39203	2025 年8 月 14 日

Discourse retort表情符号可能存在的安全问题

相关话题