You can paste an image into emoji name

(#4281) Bug Open: Needs triage desktop emoji ui

Reproduction steps

  1. Copy an image to get it into your clipboard/paste buffer
  2. Go to a community you can upload or modify emojis on
  3. Edit the emoji name
  4. Paste your image

Expected behaviour

You should only be able to paste text in here!

Actual behaviour

It lets you paste an image. Validation fails, as shown in the screenshot, but it shouldn't even be allowed to get that far imo I don't think anyone's going to do this on purpose, but it shouldn't be possible even by accident. (I did it by accident) This is effectively the same issue of lack of input sanitization as 4282 but with very different symptoms, so I felt it was worth reporting this separately.

Build information

Canary Desktop 2026.1018.223341, Web 2026.1018.223341, Linux 7.2.10-200.fc44.x86_64 (x64), Electron 44.4.1, Chrome 152.0.7977.78, Node 24.21.0, Locale en-US

Platform

Linux

Comments

Sign in with Fluxer to comment and vote.

No comments yet.