that's not XSS though...?
I know but its funnier to say it is
You tryna XSS attack Wasteof?
No, jeffalo added it himself
Check his profile :)
The custom button runs the bookmarklet "javascript:(function()%7B%24nuxt.%24auth.user.name%20%3D%20%60oren%60%7D)()%3B"
It's only client side though
@/mybearworld got verified though