IFrame windows can easily be hijacked.

[e9x]

This will require restricting access to windows from other origins. The final product should keep or preserve postMessage behavior and still support captchas.

[th030357v]

oi

<@everyone>

@everyone

[tuta-amb]

@ghost what tf are you doing

that's not a thing on github you know

[VillainsRule]

@ghost what tf are you doing

that's not a thing on github you know

the user is trying to use Github to cross-ping on Discord.

[VillainsRule]

their old username was @enfiree, btw

[tuta-amb]

@VillainsRule does it work?

[VillainsRule]

no ofc not

[proudparrot2]

it puts the ping inside embed content which doesn’t ping