YouTube makes the clbuttic mistake



  • Try leaving a comment on a YouTube video using the words "transcript", "description", "scripture", "subscription", or anything else with "script" in it. Go ahead, just try.

    At least right now - as of 1:00 EDT July 5, 2010 - the word "script" will mysteriously disappear from those words when the comment is posted.

    YouTube? This is how not to filter JavaScripts.



  • Well, it is a rush fix for incorrect escaping of the <script> tag, which has been abused by the 4chan croud. Clbuttic is quick, if dirty.



  • Yeah, I'd read about the exploit. But really, not /\bscript\b/, at the very least? Or /<script/? Since it's not like JavaScripts will run when the tag is immediately surrounded by other letters...

    Edit: OK, perhaps < wouldn't work, since the exploit had to do with multiple layers of HTML entity encoding. But limiting it to word boundaries would not be an issue even then, given how every HTML parser works. If not /\bscript\b/, then /[^a-z]script[^a-z]/, at least.



  •  Yes, but what if I wanted to post a youtube comment that explains all the above, with examples?



  •  for a while, using scscriptript did the trick after the first set of youtube's countermeasures.

     



  • dunno how this happened at all, really. you'd think this as the sort of thing youtube would catch.



  • I'd rather have a halfbutted escaping than being surprised with the "1 guy,1 jar" video while being rick-rolled any day.



  • Why would you bother? It's not like anyone can follow a thread of comments.



  • [quote user="Renan "C#" Sousa"]"1 guy,1 jar" video[/quote] 

    Do I want to know?

     

    Also, is this the moment where we all do format n X, m Y jokes, like:

    1 bullet, 1 kill

    or

    1 girl,  4 guys

    or

    1 girl, 3 hands

    or

    1 morbs, 4 guys

    or 

    [ worst WWII nazi/jew joke ever. I'm not touching this one. ]

     



  • @MustBeUsersFault said:

     for a while, using scscriptript did the trick after the first set of youtube's countermeasures.

     

    ::blinks:: ...Wow. Whatever happened to just transforming < and > to HTML entities when displaying the comment, the way most forums I've seen do it?



  • oh well - nobody from Scunthorpe uses the internet anyway...


  • Discourse touched me in a no-no place

    @dhromed said:

    [quote user="Renan "C#" Sousa"]"1 guy,1 jar" video
    Do I want to know?[/quote] No.



  • @dhromed said:

    [quote user="Renan "C#" Sousa"]"1 guy,1 jar" video

     

    Do I want to know?

     

    Also, is this the moment where we all do format n X, m Y jokes, like:

    1 bullet, 1 kill

    or

    1 girl,  4 guys

    or

    1 girl, 3 hands

    or

    1 morbs, 4 guys

    or 

    [ worst WWII nazi/jew joke ever. I'm not touching this one. ]

     

    [/quote]

    It also goes by the name Glass Ass if you don't like the n X, mY notation.


  • BINNED

    I don't know who's more stupid: The fucking dumbass doing that shit or me for actually watching the first 26 seconds.

    I solely blame you for underhandedly spurring my curiosity, though.



  • @dhromed said:

    1 morbs, 4 guys

    or 

    [ worst WWII nazi/jew joke ever. See above. ]

    FTFY.



  • s/script/scr&#105;pt/ . Problem solved.



    Or they could have done it the right way to begin with: s/&lt;/&lt;/ .



  •  I was just on another forum where a person made reference to Dick Martin, from the 70's comedy team of Rowan and Martin.  The name was displayed as "~censored~ Martin".

    I once tried to post a message on another forum but it wouldn't allow the phrase "one group".  After a while I figured out the problem.  The forum's super duper dirty-word-filter didn't just look for bad words, it looked for attempts to circumvent the filter by using unusual letter groupings.  As a result, it saw the "ne" from the end of the word "one" and "gro" from the beginning of the word "group" as "negro".  Yes, negro is a "bad word".

     

     


Log in to reply