> Lucid you high again, this used to be an XSS you fixed and now you broke it.
TL;DR: There's a bug when EM tries to write pinged messages. It has some funny results, not the old XSS or anything harmful, so im going on a rant. i may post pictures below, idk yet it depends how deep i get into this thread since its 3 AM. Somebody discovered this bug and created all users that can possibly produce it, until there's a new CSS sheet, or at least most that i checked.
So when you message in a lobby, the site constructs the message you're trying to send and lets it go through. The message is composed of HTML elements, essentially building blocks of the site. Sometimes, the site has to know personal information about you when constructing this message - i.e, certain users have colors, so this site has to know what user it is to decide what color message will be sent;
Passing the user to the elements has to be done safely; if it isn't, it could very well affect the layout and content of the page and cause an unwanted behavior. What I found is essentially an element handling which is done irresponsibly in some cases when you ping a user in-game.
The behavior is as such: pings generate two elements,an outer span which contains the styling of the ping and an inner div that has the text of the message. The outer span for some reason types the username in the class attribute of the element, and so if your username is included in any stylesheet at all in a gaming page ( i didn't check how wide this is, worked for me in main lobby so i assume it does for all lobbies ), layout is going to go wrong, funny and fast.
While testing this effect I experimented with the following stylesheet present in main lobby games: https://epicmafia.com/stylesheets/m/style.css?1543363854?1543363854
So I was trying to find a username which reproduces this bug, that doesn't exist yet, and I failed. apparently some people figured it out and didn't snitch like me, i.e https://epicmafia.com/user/692689#/ - look at their profile. the great most are noavis with no games - i.e user selected, container26, votebooth, etc. probably someone who figured out this bug. Ah nice for them, anyway lucid fix your broken site.
Lastly, example: this is what on my google chrome a ping to a user named success would look like:
