Unrelated question: Why does it say NO GLYPH at the end of each line when viewing your post in the Bluesky app? I saw this with multiple of your posts already 🤔

2. should be the issue. I think innerText decides HTML entities, like &lt; to <, which is then assigned to innerHTML.

Looks fine to me. Is there a pitfall with basename()?

It's actually free to register with a (burner) email and read the article, you don't have to pay.

well well well
www.404media.co/the-signal-c...

Ergänzung zur Kiwi 🥝: Es könnte eine Anspielung auf das Kiwi Farms Forum sein, welches hauptsächlich aus extremen, organisierten harassment von trans Personen bestand.
en.m.wikipedia.org/wiki/Kiwi_Fa...

Surveillance contractors not choosing overly edgy sounding company names challenge (impossible)

Beanies sold out 😫

I nominate @sonarresearch.bsky.social, now finally on bluesky :)

The call expression check looks at the name of the variable, but not the runtime value of the called function, assuming that it is safe if named calc* We can abuse this to call the function constructor directly and not through calcCall which would block it
calcCall(calcPrint.constructor('alert(1)'))

The code tries to shadow all globals with local variables, but uses Object.keys to enumerate over window. Object.keys does not include non-enumerable properties, which includes globalThis. This leaves globalThis intact for us to use

You can use globalThis to get access to all globals again and call arbitrary global functions with the help of calcCall. Then just send innerText of the whole site to your server with fetch :)

This calls for Stoßlüften
www.huffpost.com/entry/luften...