Sourcehut account takeover via build logs (XSS in Git

Really commendable work fixing up the upstream python project. I don't think its just my internet connection. Not sure if Google is throttling it or its getting slammed by AI. But does 2D have to be restricted to purely technical matters. But anyway, it's a small team and there is a chance we can learn said answers.