I tried some XSS (of course) and I'm getting "Contains web script that could be considered spam or a security risk."
I hope that means they're not keyword filtering on `alert(` or something...
Also "Web links are prohibited", "Gibberish or unreadable/nonsensical message detected", "Includes non-text elements and scripts.", "Script injection attempt detected", "Potentially malicious code injection."
It seems like a different error message every time. Are these... being generated by an AI???
I hope that means they're not keyword filtering on `alert(` or something...
Also "Web links are prohibited", "Gibberish or unreadable/nonsensical message detected", "Includes non-text elements and scripts.", "Script injection attempt detected", "Potentially malicious code injection."
It seems like a different error message every time. Are these... being generated by an AI???
Oh my god, they are: https://github.com/callumthomson/dear-next-visitor/blob/d867...