GET https://kbin.spritesserver.nl/index.php/m/asklemmy@lemmy.ml/t/983/What-are-these-comments-on-lemmy-posts/comment/9501/votes/up

Response
200 OK
IP
216.73.216.88
Profiled on
Token
d42645

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 28.78 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.08 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1371 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#311
    +icon: Proxies\__CG__\App\Entity\Image {#292 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#319
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#283 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#279 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#268 …}
    +entries: Doctrine\ORM\PersistentCollection {#226 …}
    +posts: Doctrine\ORM\PersistentCollection {#184 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#246 …}
    +bans: Doctrine\ORM\PersistentCollection {#163 …}
    +reports: Doctrine\ORM\PersistentCollection {#149 …}
    +badges: Doctrine\ORM\PersistentCollection {#127 …}
    +logs: Doctrine\ORM\PersistentCollection {#117 …}
    +awards: Doctrine\ORM\PersistentCollection {#106 …}
    +categories: Doctrine\ORM\PersistentCollection {#93 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#320
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#314
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Hey, I can tell you want it does. While I don’t know if they try to download something too (while it really doesn’t look like it), they are trying to steal your browser cookies.\n
    \n
    I haven’t removed the obfuscation yet as I am literally in bed but I can tell the general idea of the code.\n
    \n
    Onload is a html attribute. Html attribute tell your browser more about what the browser should be doing. So basically onload is an instruction to your browser. By posting those comments, they try to run something called cross site scripting. Basically they want to run their code in your browser without them being the website owner. So now we know the intend of the post, let’s look into the details.\n
    \n
    Onload is an attribute that tells the browser to do something once it is fully loaded.\n
    \n
    Fetch is a function that allows your browser to request additional information from the server. Endless scrolling would be done with that.\n
    \n
    String.fromcharcode is just there to hide a little bit. Think of it as a fancy way to say a word. they are saying a website to connect to there.\n
    \n
    Then document.cookie are your cookies for that website.\n
    \n
    The next thing is probably your username or something.\n
    \n
    So what does that mean? They try to make your browser execute their code when the website is onloaded. The code sends your cookies and your username(?) To a server. They probably save the username and cookie and try to steal the account later.\n
    \n
    You seeing the code is good evidence that your browser hasn’t execute the code as the browser didn’t understand it as code to be executed but code to display. So you are probably safe and don’t need to worry\n
    \n
    Edit: ups sorry for not answering the question. I don’t know which client they are targeting. They might or might not be targeting wefwef. But they target you, the user, too. And it is probably for Webbrowser users, so chances are wefwef or other web clients.\n
    \n
    Edit edit: some people pointed out that it is not the username but basically the admin status of the account.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 18
  +score: 0
  +lastActive: DateTime @1689035090 {#1602
    date: 2023-07-11 02:24:50.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1375 …}
  +nested: Doctrine\ORM\PersistentCollection {#1400 …}
  +votes: Doctrine\ORM\PersistentCollection {#2428 …}
  +reports: Doctrine\ORM\PersistentCollection {#1904 …}
  +favourites: Doctrine\ORM\PersistentCollection {#60 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2487 …}
  -id: 9501
  -bodyTs: "'account':257,367 'addit':157 'admin':363 'allow':152 'answer':306 'attribut':64,66,134 'basic':79,100,361 'bed':49 'bit':177 'browser':35,69,74,86,109,138,154,225,268,276 'call':96 'chanc':341 'client':314,347 'code':59,106,228,235,262,273,282,287 'comment':90 'connect':195 'cooki':36,202,238,251 'cross':97 'detail':130 'didn':277 'display':289 'document.cookie':199 'doesn':24 'done':166 'download':18 'edit':301,348,349 'endless':162 'evid':265 'execut':226,271,285 'fanci':183 'fetch':147 'fulli':145 'function':150 'general':55 'good':264 'hasn':269 'haven':38 'hey':1 'hide':174 'html':63,65 'idea':56 'inform':158 'instruct':83 'intend':121 'know':13,119,312 'later':258 'let':125 'like':27 'liter':47 'littl':176 'load':146 'look':26,127 'make':223 'mean':219 'might':319,321 'need':298 'next':207 'obfusc':42 'onload':60,80,131,233 'owner':115 'peopl':351 'point':352 'post':88,124 'probabl':210,246,293,336 'question':308 'realli':23 'remov':40 'request':156 'run':94,104 'safe':294 'save':247 'say':186,191 'script':99 'scroll':163 'see':260 'send':236 'server':161,244 'site':98 'someth':19,95,141,214 'sorri':303 'status':364 'steal':33,255 'string.fromcharcode':169 'target':317,324,328 'tell':4,53,67,136 'thing':208 'think':178 'tri':16,31,92,221,253 'understand':279 'up':302 'user':331,339 'usernam':212,241,249,359 'want':6,102 'way':184 'web':346 'webbrows':338 'websit':114,193,205,231 'wefwef':325,343 'without':110 'word':188 'worri':300 'would':164 'yet':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://discuss.tchncs.de/comment/847668"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688962975 {#1941
    date: 2023-07-10 06:22:55.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1371 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#311
    +icon: Proxies\__CG__\App\Entity\Image {#292 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#319
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#283 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#279 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#268 …}
    +entries: Doctrine\ORM\PersistentCollection {#226 …}
    +posts: Doctrine\ORM\PersistentCollection {#184 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#246 …}
    +bans: Doctrine\ORM\PersistentCollection {#163 …}
    +reports: Doctrine\ORM\PersistentCollection {#149 …}
    +badges: Doctrine\ORM\PersistentCollection {#127 …}
    +logs: Doctrine\ORM\PersistentCollection {#117 …}
    +awards: Doctrine\ORM\PersistentCollection {#106 …}
    +categories: Doctrine\ORM\PersistentCollection {#93 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#320
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#314
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Hey, I can tell you want it does. While I don’t know if they try to download something too (while it really doesn’t look like it), they are trying to steal your browser cookies.\n
    \n
    I haven’t removed the obfuscation yet as I am literally in bed but I can tell the general idea of the code.\n
    \n
    Onload is a html attribute. Html attribute tell your browser more about what the browser should be doing. So basically onload is an instruction to your browser. By posting those comments, they try to run something called cross site scripting. Basically they want to run their code in your browser without them being the website owner. So now we know the intend of the post, let’s look into the details.\n
    \n
    Onload is an attribute that tells the browser to do something once it is fully loaded.\n
    \n
    Fetch is a function that allows your browser to request additional information from the server. Endless scrolling would be done with that.\n
    \n
    String.fromcharcode is just there to hide a little bit. Think of it as a fancy way to say a word. they are saying a website to connect to there.\n
    \n
    Then document.cookie are your cookies for that website.\n
    \n
    The next thing is probably your username or something.\n
    \n
    So what does that mean? They try to make your browser execute their code when the website is onloaded. The code sends your cookies and your username(?) To a server. They probably save the username and cookie and try to steal the account later.\n
    \n
    You seeing the code is good evidence that your browser hasn’t execute the code as the browser didn’t understand it as code to be executed but code to display. So you are probably safe and don’t need to worry\n
    \n
    Edit: ups sorry for not answering the question. I don’t know which client they are targeting. They might or might not be targeting wefwef. But they target you, the user, too. And it is probably for Webbrowser users, so chances are wefwef or other web clients.\n
    \n
    Edit edit: some people pointed out that it is not the username but basically the admin status of the account.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 18
  +score: 0
  +lastActive: DateTime @1689035090 {#1602
    date: 2023-07-11 02:24:50.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1375 …}
  +nested: Doctrine\ORM\PersistentCollection {#1400 …}
  +votes: Doctrine\ORM\PersistentCollection {#2428 …}
  +reports: Doctrine\ORM\PersistentCollection {#1904 …}
  +favourites: Doctrine\ORM\PersistentCollection {#60 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2487 …}
  -id: 9501
  -bodyTs: "'account':257,367 'addit':157 'admin':363 'allow':152 'answer':306 'attribut':64,66,134 'basic':79,100,361 'bed':49 'bit':177 'browser':35,69,74,86,109,138,154,225,268,276 'call':96 'chanc':341 'client':314,347 'code':59,106,228,235,262,273,282,287 'comment':90 'connect':195 'cooki':36,202,238,251 'cross':97 'detail':130 'didn':277 'display':289 'document.cookie':199 'doesn':24 'done':166 'download':18 'edit':301,348,349 'endless':162 'evid':265 'execut':226,271,285 'fanci':183 'fetch':147 'fulli':145 'function':150 'general':55 'good':264 'hasn':269 'haven':38 'hey':1 'hide':174 'html':63,65 'idea':56 'inform':158 'instruct':83 'intend':121 'know':13,119,312 'later':258 'let':125 'like':27 'liter':47 'littl':176 'load':146 'look':26,127 'make':223 'mean':219 'might':319,321 'need':298 'next':207 'obfusc':42 'onload':60,80,131,233 'owner':115 'peopl':351 'point':352 'post':88,124 'probabl':210,246,293,336 'question':308 'realli':23 'remov':40 'request':156 'run':94,104 'safe':294 'save':247 'say':186,191 'script':99 'scroll':163 'see':260 'send':236 'server':161,244 'site':98 'someth':19,95,141,214 'sorri':303 'status':364 'steal':33,255 'string.fromcharcode':169 'target':317,324,328 'tell':4,53,67,136 'thing':208 'think':178 'tri':16,31,92,221,253 'understand':279 'up':302 'user':331,339 'usernam':212,241,249,359 'want':6,102 'way':184 'web':346 'webbrows':338 'websit':114,193,205,231 'wefwef':325,343 'without':110 'word':188 'worri':300 'would':164 'yet':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://discuss.tchncs.de/comment/847668"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688962975 {#1941
    date: 2023-07-10 06:22:55.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1371 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#311
    +icon: Proxies\__CG__\App\Entity\Image {#292 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#319
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#283 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#279 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#268 …}
    +entries: Doctrine\ORM\PersistentCollection {#226 …}
    +posts: Doctrine\ORM\PersistentCollection {#184 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#246 …}
    +bans: Doctrine\ORM\PersistentCollection {#163 …}
    +reports: Doctrine\ORM\PersistentCollection {#149 …}
    +badges: Doctrine\ORM\PersistentCollection {#127 …}
    +logs: Doctrine\ORM\PersistentCollection {#117 …}
    +awards: Doctrine\ORM\PersistentCollection {#106 …}
    +categories: Doctrine\ORM\PersistentCollection {#93 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#320
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#314
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Hey, I can tell you want it does. While I don’t know if they try to download something too (while it really doesn’t look like it), they are trying to steal your browser cookies.\n
    \n
    I haven’t removed the obfuscation yet as I am literally in bed but I can tell the general idea of the code.\n
    \n
    Onload is a html attribute. Html attribute tell your browser more about what the browser should be doing. So basically onload is an instruction to your browser. By posting those comments, they try to run something called cross site scripting. Basically they want to run their code in your browser without them being the website owner. So now we know the intend of the post, let’s look into the details.\n
    \n
    Onload is an attribute that tells the browser to do something once it is fully loaded.\n
    \n
    Fetch is a function that allows your browser to request additional information from the server. Endless scrolling would be done with that.\n
    \n
    String.fromcharcode is just there to hide a little bit. Think of it as a fancy way to say a word. they are saying a website to connect to there.\n
    \n
    Then document.cookie are your cookies for that website.\n
    \n
    The next thing is probably your username or something.\n
    \n
    So what does that mean? They try to make your browser execute their code when the website is onloaded. The code sends your cookies and your username(?) To a server. They probably save the username and cookie and try to steal the account later.\n
    \n
    You seeing the code is good evidence that your browser hasn’t execute the code as the browser didn’t understand it as code to be executed but code to display. So you are probably safe and don’t need to worry\n
    \n
    Edit: ups sorry for not answering the question. I don’t know which client they are targeting. They might or might not be targeting wefwef. But they target you, the user, too. And it is probably for Webbrowser users, so chances are wefwef or other web clients.\n
    \n
    Edit edit: some people pointed out that it is not the username but basically the admin status of the account.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 18
  +score: 0
  +lastActive: DateTime @1689035090 {#1602
    date: 2023-07-11 02:24:50.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Fleecer74@lemmy.sdf.org"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1375 …}
  +nested: Doctrine\ORM\PersistentCollection {#1400 …}
  +votes: Doctrine\ORM\PersistentCollection {#2428 …}
  +reports: Doctrine\ORM\PersistentCollection {#1904 …}
  +favourites: Doctrine\ORM\PersistentCollection {#60 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2487 …}
  -id: 9501
  -bodyTs: "'account':257,367 'addit':157 'admin':363 'allow':152 'answer':306 'attribut':64,66,134 'basic':79,100,361 'bed':49 'bit':177 'browser':35,69,74,86,109,138,154,225,268,276 'call':96 'chanc':341 'client':314,347 'code':59,106,228,235,262,273,282,287 'comment':90 'connect':195 'cooki':36,202,238,251 'cross':97 'detail':130 'didn':277 'display':289 'document.cookie':199 'doesn':24 'done':166 'download':18 'edit':301,348,349 'endless':162 'evid':265 'execut':226,271,285 'fanci':183 'fetch':147 'fulli':145 'function':150 'general':55 'good':264 'hasn':269 'haven':38 'hey':1 'hide':174 'html':63,65 'idea':56 'inform':158 'instruct':83 'intend':121 'know':13,119,312 'later':258 'let':125 'like':27 'liter':47 'littl':176 'load':146 'look':26,127 'make':223 'mean':219 'might':319,321 'need':298 'next':207 'obfusc':42 'onload':60,80,131,233 'owner':115 'peopl':351 'point':352 'post':88,124 'probabl':210,246,293,336 'question':308 'realli':23 'remov':40 'request':156 'run':94,104 'safe':294 'save':247 'say':186,191 'script':99 'scroll':163 'see':260 'send':236 'server':161,244 'site':98 'someth':19,95,141,214 'sorri':303 'status':364 'steal':33,255 'string.fromcharcode':169 'target':317,324,328 'tell':4,53,67,136 'thing':208 'think':178 'tri':16,31,92,221,253 'understand':279 'up':302 'user':331,339 'usernam':212,241,249,359 'want':6,102 'way':184 'web':346 'webbrows':338 'websit':114,193,205,231 'wefwef':325,343 'without':110 'word':188 'worri':300 'would':164 'yet':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://discuss.tchncs.de/comment/847668"
  +editedAt: null
  +createdAt: DateTimeImmutable @1688962975 {#1941
    date: 2023-07-10 06:22:55.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#311
  +icon: Proxies\__CG__\App\Entity\Image {#292 …}
  +name: "asklemmy@lemmy.ml"
  +title: "asklemmy"
  +description: """
    A loosely moderated place to ask open-ended questions\n
    \n
    **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
    \n
    If your post meets the following criteria, it’s welcome here!\n
    \n
    1. Open-ended\n
    2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
    3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
    4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
    5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
    \n
    Support alternatives:\n
    \n
    - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
    - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
    - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
    \n
    ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
    """
  +rules: null
  +subscriptionsCount: 0
  +entryCount: 580
  +entryCommentCount: 15558
  +postCount: 7
  +postCommentCount: 129
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1689748304 {#319
    date: 2023-07-19 08:31:44.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#283 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#279 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#268 …}
  +entries: Doctrine\ORM\PersistentCollection {#226 …}
  +posts: Doctrine\ORM\PersistentCollection {#184 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#246 …}
  +bans: Doctrine\ORM\PersistentCollection {#163 …}
  +reports: Doctrine\ORM\PersistentCollection {#149 …}
  +badges: Doctrine\ORM\PersistentCollection {#127 …}
  +logs: Doctrine\ORM\PersistentCollection {#117 …}
  +awards: Doctrine\ORM\PersistentCollection {#106 …}
  +categories: Doctrine\ORM\PersistentCollection {#93 …}
  -id: 9
  +apId: "asklemmy@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/asklemmy"
  +apPublicUrl: "https://lemmy.ml/c/asklemmy"
  +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "asklemmy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1689747596 {#320
    date: 2023-07-19 08:19:56.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1686889707 {#314
    date: 2023-06-16 06:28:27.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details