just remembered deep linking exists
bsky.app/search?q=pig...
https://bsky.app/search?q=pigeone
bsky.app
2 3
also doesn't work on desktop - just takes me to /search, *unless* I open it in a new tab, then it works
4 6might be possible to come up with some kind of workaround that forces it to open a new page.
bsky.app/search?q=pig...
1 5Samuel
@samuel.fm
wait how do you force it to be target=_blank
1 4David Buchanan"https://bsky.%61pp/"
3 2 14Samuelwtf is that???
1 4David Buchananjust %-encoding lol, fools the host comparison check
5 15SamuelI wonder what the check specifically is, since the URL constructor handles that. it must be a dumb `uri.startsWith("https://bsky.app")` or something
1Samuel
David Buchananah interesting. well at least the URL() api is sane - must be a dumb check then...
2
thought agent jabsco 🏁who the FUCK made percent-coding legal in the domain part of a URL
2 12David Buchananthought agent jabsco 🏁that's fine. in fact technically that's more correct than usual (explicitly denoting the root zone)
1 5Samuelwow that is fascinating, cookies aren't shared if you include the root zone? I'm not logged in on that link
1 4David Buchananyeah it's a fun hack to have two concurrent sessions, works on a lot of sites, completely breaks others
1 1 7Samuelhuh. Didn’t know that they didn’t count as the same
1 1thought agent jabsco 🏁They should, but whatever Netscape intern was in charge of implementing the cookie jar in 1997 didn't realize host-matching should have been more complicated than a strcmp() against the struct field until it was far too late
1 4
austinsome guy named Tim Berners-Lee looks like
1 1thought agent jabsco 🏁mother FUCKER
RFC 1630: Universal Resource Identifiers in WWW: A Unifying Syntax for the Expression of Names and A...
This document defines the syntax used by the World-Wide Web initiative to encode the names and addresses of objects on the Internet. This memo provides information for the Internet community. This mem...
datatracker.ietf.org
austin:sickos:
1 2thought agent jabsco 🏁I was so ready to be like "timbl didn't invent URIs, that was a pre-existing DARPA standard like SGML", but then I went back and looked it up, and, son of a bitch
3David BuchananYou could pick any subset of chars to encode but I know a=%61 off the top of my head
3 8
Jazthought agent jabsco 🏁@pfrazee.com new bug vector just dropped. might also want to make sure the backend team isn't doing anything that could be circumvented this way either
3
Amethyst BasiliskShellcode reflexes
1
Kuba Suder 🇵🇱🇺🇦Sigh :p
1 1