<img src="x" onerror="alert('hi! here is some fresh new xss, enjoy
')">
Feb 18, 2022, 2:04 PM
5
0
5
comments (single view)
Did this ever work? I found out that almost none of the attributes get passed through the API