Reproduction steps
- Copy an image to get it into your clipboard/paste buffer
- Go to a community you can upload or modify emojis on
- Edit the emoji name
- Paste your image
Expected behaviour
You should only be able to paste text in here!
Actual behaviour
It lets you paste an image. Validation fails, as shown in the screenshot, but it shouldn't even be allowed to get that far imo
I don't think anyone's going to do this on purpose, but it shouldn't be possible even by accident. (I did it by accident)
This is effectively the same issue of lack of input sanitization as 4282 but with very different symptoms, so I felt it was worth reporting this separately.
Build information
Canary Desktop 2026.1018.223341, Web 2026.1018.223341, Linux 7.2.10-200.fc44.x86_64 (x64), Electron 44.4.1, Chrome 152.0.7977.78, Node 24.21.0, Locale en-US
Platform
Linux