This happened briefly today on the superconductor market.
Note: If such behavior is triggered unintentionally, but the mechanism would also have been exploitable by a malicious actor, resolves YES.
1,000🏅 Top traders
| # | Name | Total profit |
|---|---|---|
| 1 | Ṁ42 | |
| 2 | Ṁ36 | |
| 3 | Ṁ24 | |
| 4 | Ṁ7 | |
| 5 | Ṁ5 |
@TamarSpoerri Embeds were apparently implemented through un-sandboxed iframes, and someone embedded a page (in a comment) that caused a redirect in the parent.
(I think not intentionally on the commenter's part. They were linking to a video, and the website hosting it probably has frame-breaker stuff set up in general.)
@jskf I strongly suspect that bilibili's frame-breaker is on the 404, not on all videos, and it was only when the video was taken down that the redirect started happening. otherwise, the commenter would've been redirected when the embed-preview shows up while they were editing the comment.
(haven't actually checked tho)