The "fa-spin" Testing Thread



  • Continuing the discussion from The official hack testing thread:

    @VinDuv said:

    <code class="fa-li fa-spin"><code class="fa-li"><code class="fa-li"><code class="fa-li"><code class="fa-li"> :cat: </code></code></code></code></code></code></code>

    That got me thinking: since all spins need to be individually operated by the browsers, how many spins in a topic can take a browser before becoming unusable?

    Edit: fixed typo. @Zecc: you know which.



  • :earth_americas: :waning_crescent_moon: :sunny:

    I will start with my simple planetary model.



  • @faoileag said:

    I will start with my simple planetary model.

    Please make the moon orbit the Earth.



  • I've left that as an exercise to inquisitive minds ;-)



  • :shit:

    I'll just leave this here before I mute this topic.



  • @Luhmann said:

    I'll just leave this here before I mute this topic.

    @faoileag, please change your avatar to a fan pointing to the left.



  • :sunny: :waning_crescent_moon: :earth_americas:

    @Keith: better now?


  • Discourse touched me in a no-no place

    This post is deleted!


  • ‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑


  • Discourse touched me in a no-no place

    @faoileag said:

    how many spins in a topic can take a bowser before becoming unusable?

    Doesn't this stress test require forum software that doesn't implement infiniscroll?


  • Discourse touched me in a no-no place

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        



  • :sunny: :earth_africa: :new_moon:

    Hmm... that moon orbit is still somewhat off.


  • Discourse touched me in a no-no place

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    



  • @faoileag said:

    better now?

    Copernicus would be proud.



  • We should make a script to automatically put a spinning WTF logo over every Nagesh's post.



  • @Keith said:

    @faoileag, please change your avatar to a fan pointing to the left.

    Like that: @Luhmann :poop: :fan: ?

    Bug: there is no emoji for fan or windmill!



  • @PJH said:

    Doesn't this stress test require forum software that doesn't implement infiniscroll?

    No, once you scroll-wheel to the bottom, all posts are in the dom (at least they were last time I tested, and for "smaller" topics).



  • I like the pulsating horizontal scrollbar one of the posts introduced.

    Edit: which is a nice indicator that animation continues even if the post in question is far outside the viewport.



  • @faoileag said:

    bowser



  • Uh oh, it's the boss.

    *Tries to look busy*



  • Holy awesome:



  • Now, that's some serious asskicking!



  • OK, fine, I signed up again on the new forum just to like this topic. Best abuse I've seen so far.

    I'm guessing that slapping an overflow:hidden on post contents would mostly solve the issue.

    Edit: on second thought, after seeing the 'Page Disabled Testing Thread' I think we'd probably need to disable classes altogether. http://what.thedailywtf.com/t/the-official-page-disabling-thread/1484



  • @nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@miketheliar@ben_lubar



  • This post is deleted!


  • Looks like this has been patched already. :(



  • @nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@nagesh@miketheliar@ben_lubar



  • I'm enjoying the ever-resizing horizontal scrollbar on this topic.
    (sorry for the low-quality GIF)



  • Glad to see you GIF'd that for posterity, since this exploit can't be done any more, and someone might rebake the posts above.



  • Is it Firefox? It doesn't resize on Chrome, and in IE the spinning seems not to work (though it lags horribly even without it).


  • Discourse touched me in a no-no place

    @LoremIpsum said:

    and someone might rebake the posts above.

    Unlikely, unless their respective authors decide to edit their posts. It's more likely that a system-wide rebake will happen.



  • @Maciejasjmj said:

    Is it Firefox?
    Indeed it is. Don't judge me.


  • Winner of the 2016 Presidential Election

    Where's my badge for finding this exploit?





  • @cartman82 said:

    It needs to be spinning.





  • Perfect! :thumbsup:


  • :belt_onion:

    Aw man, I missed spin class :frowning:
    Best abuse thread yet.


  • Discourse touched me in a no-no place

    Spinning stuff? Which post?


  • Winner of the 2016 Presidential Election

    @PJH said:

    Spinning stuff? Which post?

    http://what.thedailywtf.com/t/another-attempt-at-social-engineering/1008/292

    First post with the fa-spin class (actually, every single class on the site that didn't hide the post). Spent a couple hours digging through the source code looking for an exploit, and noticed that there were a couple of whitelisted attributes, and class on code tags was one.



  • @darkmatter said:

    Aw man, I missed spin class :frowning:
    Best abuse thread yet.

    Me also, but don't worry, there will be major opportunities to dickcourse. @ben_lubar is have advantage of understanding source code.


  • SockDev

    Why the fuck did anyone think trying to blacklist bad HTML was in any way a sane idea? Oh wait...



  • To be fair, they weren't blacklisting (for the source of this issue), they were whitelisting classes that can be put on HTML tags (either entered by posters or injected by the back-end parser), but whitelisted everything on <code> tags.


  • SockDev

    To be fair, that's still retarded.



  • I don't disagree with that statement.



  • Pity they broke the whitelisted class attribute on <code>. The thread so far doesn't even break Chrome on mobile :-(


  • Discourse touched me in a no-no place

    Patch from earlier has now been replaced with the 'correct' fix, and has been installed here.



  • Span, span, span, span, lovely span, wonderful span ...


  • BINNED

    The raw! It fails me!


  • Discourse touched me in a no-no place

    Oh FFS....


Log in to reply
 

Looks like your connection to What the Daily WTF? was lost, please wait while we try to reconnect.