yarr RSS reader iframe check allows javascript: XSS
A whitelisted host after javascript:// can hide script that runs when a subscriber opens the malicious post.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #rss
Reddit is killing RSS feeds and ending public API access because of AI bots
Reddit will shut RSS feeds on November 13 and end public API access in March 2027 over AI scraping.