gladeveintanuki

[gladeveintanuki]

Wait what's up with them??

they made a ancient dragon with a headdress that lives in a remote part of the world and have such exotic existences they can barely communicate with other dragons beyond baby speak until the elements get fucked up and now their babies can talk like normal. and their entire story is just some random dragon being vaguely condescending to their real fear of losing the connection of language that they have with their children

[gladeveintanuki]

the boston accent is the best website ever created

[gladeveintanuki]

the boston accent is the best website ever created

[gladeveintanuki]

her name is darkdye and uhm she bites sometimes but dont worry. im starting to like banescales more :]

[gladeveintanuki]

WHATS WRONG WITH YOU

[gladeveintanuki]

WHATS WRONG WITH YOU

[gladeveintanuki]

some miscellaneous FR art Ive done recently: mix of commissions, personal art, and some surprise gift art lol

———

click for better quality

if you like it, PLEASE REBLOG IT

[gladeveintanuki]

Meet Glass & Gloss!

Glass and Gloss' Genuine Genes is a new installation in the Grand Exchange. Here dragons can exchange modern genes that appear from site activities for their ancient counterparts!

[gladeveintanuki]

What are some of your favorite skins you've made?

I thought about the answer to this question for a very long time. I want to tell you a story about a skin that broke the site.

(I think this has been fixed now, which is the only reason I'm posting about it.)

Up until around March of this year, skin names weren't sanitized. I wasn't aware of this and continued to be unaware of this until the day I asked for my Valentine's pearlcatcher skins (named <3 and </3 respectively) to be renamed. Special characters often break when you submit them through the queue, so you have to go and ask the mods in the skroblems thread to fix apostophes for you so they display properly. I went and asked them to fix my pearlcatcher skin's names for me, since they weren't displaying correctly either. This lead, by accident, to the most interesting way I've gotten the site to break in a while.

My friend noticed first when they got a subscribed notification to my skin shop thread. They realized there were two pages that were completely gone.

Then they realized that the front page didn't look right either. My catalogue posts had completely vanished. Only to find... when you hovered over the thumbnail of the </3 skin's icon, my posts had hopped into the item description.

We experimented a little more before realizing this thing was... very, very powerful! You could put the skin into a den tab description, and it would put every single dragon in that tab into the space of the description box. You could break your userpage for ANYBODY on site. Your entire dragon could get swallowed up if you put it into their bio. And because the skin deleted the edit button, you couldn't get it back out.

Little did I know, the </ part of the skin name - when posted using [skin=skinid] or [item=skin: </3] - would act as an HTML tag anywhere it was posted, and completely mess up how the site displayed! I compiled everything I found and sent it into the bug forums and the contact team box for review. The thread got deleted almost immediately, confirming what I suspected: skin names aren't sanitized, and this could very easily be exploited with malicious intentions or SQL injects.

Luckily, they fixed it pretty quickly! I hope the way the site handles skin names has been updated now too. This sort of thing wouldn't have happened even if I had named the skin </3 or, god forbid, dropTable(); in the first place. I do think it was because I had the mods go in and edit the skin name that allowed the unclosed </ to display in the skin's item icon and then break the site.

So that's the story of one of my favorite skins I've made! <3 and </3 are now LOVE and LOVE(LESS) respectively. The designs themselves didn't sell too well, but for a glorious 16 hours, they contained all the power of little nuclear bombs detonating on various HTML-dependent sitepages.

[gladeveintanuki]

[gladeveintanuki]

[gladeveintanuki]

It’s Thomas.

Flight Rising Deity Stimboards: Thomas

credit:

👔 💼 👔

💼 🕴️ 💼

👔 💼 👔

[gladeveintanuki]

You have found an unhatched wind egg!

[gladeveintanuki]

na nananana nanana na na

[gladeveintanuki]

I’m FINALLY done with the dark theme rewrite. You can find it on GitHub & mirrored on Userstyles.World

It’s not exactly the same as the original due to having to standardize colors, but it does include two different color schemes to pick from, the same tweaks from my original add-on for the dark theme, and some other fun stuff. The plan is eventually to release an update that will allow you to customize all the colors to make your own theme. >:)

Hope you all enjoy 💙🖤

[gladeveintanuki]

anyone else still switch their gathering to the festival element even though you don't have to? either out of superstition or just because it's traditional lol. It just seems correct!!

[gladeveintanuki]

Did a turnaround of my aberration model for my portfolio reel! Super proud of this guy