@Edent what's so bad about <div> ... or: Why do you want to avoid them?

[xgebi@hachyderm.io]

@Edent or people know who you are and trust you that you wouldn’t do anything malicious

[phillycodehound@indieweb.social]

@Edent cool badge!

[ajhalili2006@tilde.zone]

@Edent might be too tempting to scan if uncensored but cool design + nice concept btw

[andersgo@infosec.exchange]

@Edent “but I trust you…”

[blindcoder@toot.berlin]

@Edent Curiosity killed the con attendee.

[gerardthornley@hachyderm.io]

@Edent Out of interest, what counts as "scanning?"
Taking a photo, decoding the content, using the content, or something else?

[edent@mastodon.social]

@GerardThornley there's a QR code on there.
Decoding the QR is safe. There's no way to break a QR scanner just from a code.
The destination might be dodgy - but that's no different than typing in a URl.

[cwilcox808@c.im]

@neil
Yes, on my instance, which is running v4.4.5, says "This post is pending approval from the original author."
@Edent

[gerardthornley@hachyderm.io]

@Edent That's what I thought. I quite often scan QR codes to read the content, but I make sure my scanning apps don't automatically do anything with them - I want to read the content myself before deciding whether to trust it.

[edent@mastodon.social]

@aeble https://shkspr.mobi/blog/2024/11/review-four-colour-eink-name-badge-hsn371-plus-linux-and-android-tips/

[khleedril@cyberplace.social]

@Edent You can't see this quote properly because Mastodon is still not working properly

> QUOTE

[khleedril@cyberplace.social]

@neil I'm seeing

[imrehg@fosstodon.org]

@Edent off the record!

[utrenkner@mastodon.green]

@xgebi @Edent
Yeah, the “worst” I would trust you to do is trigger people’s antivirus with the EICAR file 😊

[tekvsakdan@mastodon.tekvsakdan.si]

@Edent, but all we can see is "This post is pending approval from the original author."

[ed_mcdonagh@fosstodon.org]

@Edent @jadp

[mal3aby@mastodon.smears.org]

@Edent Sadly not (at least, if I understand what the intended behaviour is!)

[tobi@dotnet.social]

@Edent Yes!
I am using the web client for a mastodon 4.4 instance (started being available in 4.4 afaik).

[ed_mcdonagh@fosstodon.org]

@Edent @jadp ah - I see the intended behaviour on the web instance (fosstodon). Previous was using the Tusky app on Android.

[aburka@hachyderm.io]

@Edent viewing this toot from my instance, I get "This post cannot be displayed as the original author does not allow it to be quoted." for the embed, even though it's public and visible on your instance. Any idea what's up with that?