mybearworld / XSS for bossdeer

// ==UserScript==
// @name        XSS for bossdeer
// @namespace   mybearworld.github.io
// @match       *://deer.meltland.dev/*
// @grant       none
// @version     1.0
// @author      mybearworld
// @description security is overrated
// @license     MIT
// ==/UserScript==

const _appendChild = HTMLElement.prototype.appendChild
HTMLElement.prototype.appendChild = function (el) {
  if (this.classList.contains("post") && el.tagName === "SPAN" && !el.classList.contains("clickable")) {
    el.innerHTML = el.textContent;
  }
  _appendChild.call(this, el);
}