can i get an uhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh.. burgr pls...
oops
while fiddling with trying to center some images within the page description (kinda related to the puppy button!), @delan and i realised that
| oh yeah, | markdown has | tables |
|---|---|---|
| and they | have some text | alignment options |
| such as | ||
| left | center | and right |
maybe we could make a table with a single column, expand the row until it fills the sidebar, and then use the center alignment to center the image?
well. no. img elements in the sidebar are display: block, so they don't undergo text layout. bummer.
ok, now it's time for delan to be adorable and make a really wide table cell that just says awawawawawawawawawwawawa (that is, /^a(wa)+$/).
oh. that's weird.
the table cell gets wide. really wide. wide enough to escape the confines of the page's sidebar and overlap the posts. let's have a laugh about this and then forget
smash cut to the next day
ah. shit.
the user's cursor is over the link to @bark-test, but in tiiiiiny text down in the bottom left, it's actually a link to https://google.com. oops.
since imgs are max-width: 100%, they're more than happy to expand to fill their container. and because the table is Wide, it's now a very big container, and the image can cover the whole page. that's a little worse than just some text poking out.
if we wrap the image in a markdown link, though, now a good portion of clicks in the ui will actually interact with the user-controlled sidebar link instead of the intended target. uhhhh, fuck.
if we get really evil, and make the image truly transparent,
so yeah, of course this still works. but now it's invisible and you can't tell you're suffering Hijinks unless you pay close attention to the link callout and your cursor being a pointer over most of the page.
its wednesday baby. youknow what that means. its time to drink precisely no beer and email security@cohost.org
(keep in mind that the page description shows up in single post views too, so Ooops you can also clickjack someone if they open your post by itself. that actually seems a lot worse than the profile issue, thinking back)
so yeah. thanks staff for the quick response and shoutout in the patch notes. that was cool. thanks for making cohost, too. woof 
