I think this will be my last post on this. it's been ~100-200 posts of me replying to people and trying to help out the community at large. It would have been nice if Zach just fucking retweeted this post, could have calmed down so many people and saved me the time But no, misinfo is much more fun
Okay a tiny thread because people are going to freak out: This exploit in particular takes advantage of a special command that renders images (via attribute escape). If you have an overlay that processes images (most don't) then yes, this is your problem. Overlay must explicitly create img DOM.
5 reposts12 likes