Clicking an invite link joins the community without showing a preview

(#199) Bug Confirmed community security

Summary

When clicking on an invite (fluxer.gg), instead of showing a preview of the server like discord does, it instantly joins it.

Steps to reproduce

(im gonna just show how its reproduced for me, idk if this happens when pasting a fluxer.gg link in the browser)
  1. Make someone add a fluxer.gg invite link to their bio
  2. visit their bio and click on the link
  3. get instantly sent to the server without a preview

Environment (optional)

  • Commit/Tag (canary): Commit cb31608
  • Commit/Tag (main): Commit aa4e5b0
  • Commit/Tag (refactor): Commit 302c0d2
  • OS: Gentoo Linux, Kernel: Linux 6.12.68-gentoo-dist
  • runtime: ?
  • browser: Zen Browser

2 comments

Sign in with Fluxer to comment and vote.
Comment by Rex
RexSystem 1 vote
Status changed from Fixed to Confirmed
Reopened because another user confirmed it and it was bulk closed without a fix.
Comment by @PilkeySEK
RexSystem 1 vote originally by @PilkeySEK on GitHub
Also works when you make it a masked link which could allow for scams (don't ask me how, but we've seen how the most obvious scams work in discord)