As some have pointed out, there was a serious xss vulnerability in lemmy disclosed yesterday. The Lemmy team released a fix a bit ago and I've since patched infosec.pub.
What is the responsible way for testing Lemmy security? Is there currently any effort by users of this instance and other infosec related instances (if any) for finding and reporting security vulnerabilities?
Unsure if anyone else is having the same issue I am, but it looks like all of my subscribed communities got broken during this time. I see them as subscribed in the sidebar, but don't see any posts from them (nor do they appear in the communities page for the entire instance).
I'm not sure if unsub/resub-ing would fix it or not.