2025-07-29 UTC
# 
Chailotl The basic idea being someone who uses a free hosting service such as Carrd or Neocities could be tricked into adding a malicious rel="me" link to their webpage (for example, to be "rewarded" an in-game prize), which a scammer could use to hijack any accounts they've logged into via IndieAuth