kodxana/Watch-on-Odysee

Putting an Invite Link in the Video Description Exploits the Watch Button

Opened this issue · 0 comments

FlorianWendelborn commented

Describe the bug
The Watch on Odysee button isn’t safe and can be manipulated by YouTube channel owners by inserting an Odysee link in the description. This can be exploited to farm invites, for example, and it leads to bad UX as well.

To Reproduce
Steps to reproduce the behavior:

  1. Go to https://www.youtube.com/watch?v=LVjSssfQzOo
  2. Click on "Watch on Odysee"
  3. See that you’re now "invited" by the channel and get a weird notification

Expected behavior
You land on https://odysee.com/@UpperEchelonGamers:3/shadow-banning-exposed-the-twitter-files:2

Screenshots
image

Desktop (please complete the following information):

  • OS: macOS Ventura
  • Browser Firefox Developer Edition
  • Version 108

Additional context
N/A