GET https://kbin.spritesserver.nl/index.php/m/asklemmy@lemmy.ml/t/983/What-are-these-comments-on-lemmy-posts/comment/9793/favourites

Response
200 OK
IP
216.73.216.108
Profiled on
Token
088bf5

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 10.57 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.06 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    I just want to add a quick note:\n
    \n
    From OPs screenshot, I noticed the JS code is attempting to extract the session cookie from the users that click on the link. If it’s successful, it attempts to exfiltrate to some server otherwise sends an empty value.\n
    \n
    You can see the attacker/spammer obscures the url of the server using JS api as well.\n
    \n
    May be how lemmy.world attackers have had access for a lengthy period of time. Attackers have been hijacking sessions of admins. The one compromised user opened up the flood gates.\n
    \n
    Not a sec engineer, so maybe someone else can chime in.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1688963010 {#1605
    date: 2023-07-10 06:23:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
    "@malloc@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 9793
  -bodyTs: "'access':71 'add':5 'admin':84 'api':61 'attack':68,78 'attacker/spammer':52 'attempt':18,37 'chime':103 'click':28 'code':16 'compromis':87 'cooki':23 'els':101 'empti':46 'engin':97 'exfiltr':39 'extract':20 'flood':92 'gate':93 'hijack':81 'js':15,60 'lemmy.world':67 'lengthi':74 'link':31 'may':64 'mayb':99 'note':8 'notic':13 'obscur':53 'one':86 'op':10 'open':89 'otherwis':43 'period':75 'quick':7 'screenshot':11 'sec':96 'see':50 'send':44 'server':42,58 'session':22,82 'someon':100 'success':35 'time':77 'url':55 'use':59 'user':26,88 'valu':47 'want':3 'well':63"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/800376"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688963010 {#1945
    date: 2023-07-10 06:23:30.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    I just want to add a quick note:\n
    \n
    From OPs screenshot, I noticed the JS code is attempting to extract the session cookie from the users that click on the link. If it’s successful, it attempts to exfiltrate to some server otherwise sends an empty value.\n
    \n
    You can see the attacker/spammer obscures the url of the server using JS api as well.\n
    \n
    May be how lemmy.world attackers have had access for a lengthy period of time. Attackers have been hijacking sessions of admins. The one compromised user opened up the flood gates.\n
    \n
    Not a sec engineer, so maybe someone else can chime in.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1688963010 {#1605
    date: 2023-07-10 06:23:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
    "@malloc@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 9793
  -bodyTs: "'access':71 'add':5 'admin':84 'api':61 'attack':68,78 'attacker/spammer':52 'attempt':18,37 'chime':103 'click':28 'code':16 'compromis':87 'cooki':23 'els':101 'empti':46 'engin':97 'exfiltr':39 'extract':20 'flood':92 'gate':93 'hijack':81 'js':15,60 'lemmy.world':67 'lengthi':74 'link':31 'may':64 'mayb':99 'note':8 'notic':13 'obscur':53 'one':86 'op':10 'open':89 'otherwis':43 'period':75 'quick':7 'screenshot':11 'sec':96 'see':50 'send':44 'server':42,58 'session':22,82 'someon':100 'success':35 'time':77 'url':55 'use':59 'user':26,88 'valu':47 'want':3 'well':63"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/800376"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688963010 {#1945
    date: 2023-07-10 06:23:30.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    I just want to add a quick note:\n
    \n
    From OPs screenshot, I noticed the JS code is attempting to extract the session cookie from the users that click on the link. If it’s successful, it attempts to exfiltrate to some server otherwise sends an empty value.\n
    \n
    You can see the attacker/spammer obscures the url of the server using JS api as well.\n
    \n
    May be how lemmy.world attackers have had access for a lengthy period of time. Attackers have been hijacking sessions of admins. The one compromised user opened up the flood gates.\n
    \n
    Not a sec engineer, so maybe someone else can chime in.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1688963010 {#1605
    date: 2023-07-10 06:23:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
    "@malloc@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 9793
  -bodyTs: "'access':71 'add':5 'admin':84 'api':61 'attack':68,78 'attacker/spammer':52 'attempt':18,37 'chime':103 'click':28 'code':16 'compromis':87 'cooki':23 'els':101 'empti':46 'engin':97 'exfiltr':39 'extract':20 'flood':92 'gate':93 'hijack':81 'js':15,60 'lemmy.world':67 'lengthi':74 'link':31 'may':64 'mayb':99 'note':8 'notic':13 'obscur':53 'one':86 'op':10 'open':89 'otherwis':43 'period':75 'quick':7 'screenshot':11 'sec':96 'see':50 'send':44 'server':42,58 'session':22,82 'someon':100 'success':35 'time':77 'url':55 'use':59 'user':26,88 'valu':47 'want':3 'well':63"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/800376"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688963010 {#1945
    date: 2023-07-10 06:23:30.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#313
  +icon: Proxies\__CG__\App\Entity\Image {#294 …}
  +name: "asklemmy@lemmy.ml"
  +title: "asklemmy"
  +description: """
    A loosely moderated place to ask open-ended questions\n
    \n
    **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
    \n
    If your post meets the following criteria, it’s welcome here!\n
    \n
    1. Open-ended\n
    2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
    3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
    4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
    5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
    \n
    Support alternatives:\n
    \n
    - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
    - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
    - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
    \n
    ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
    """
  +rules: null
  +subscriptionsCount: 0
  +entryCount: 580
  +entryCommentCount: 15558
  +postCount: 7
  +postCommentCount: 129
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1689748304 {#321
    date: 2023-07-19 08:31:44.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#285 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
  +entries: Doctrine\ORM\PersistentCollection {#228 …}
  +posts: Doctrine\ORM\PersistentCollection {#186 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
  +bans: Doctrine\ORM\PersistentCollection {#165 …}
  +reports: Doctrine\ORM\PersistentCollection {#151 …}
  +badges: Doctrine\ORM\PersistentCollection {#129 …}
  +logs: Doctrine\ORM\PersistentCollection {#119 …}
  +awards: Doctrine\ORM\PersistentCollection {#108 …}
  +categories: Doctrine\ORM\PersistentCollection {#95 …}
  -id: 9
  +apId: "asklemmy@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/asklemmy"
  +apPublicUrl: "https://lemmy.ml/c/asklemmy"
  +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "asklemmy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1689747596 {#322
    date: 2023-07-19 08:19:56.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1686889707 {#316
    date: 2023-06-16 06:28:27.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details