[iOS/Safari] Twitter snapshots showing "JavaScript disabled" error after upgrade

[wwalt1a]

Hi, I'm using the linkding:latest-plus Docker image. After upgrading the server and capturing some Twitter/X posts using the built-in SingleFile, I noticed that these snapshots don't render correctly in Safari on iOS.

Instead of the actual content, the page displays:

We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using x.com. You can see a list of supported browsers in our Help Center.

The strange thing is that even older snapshots, which used to display perfectly fine, are now showing this same error.

[sissbruecker]

Sounds like it's related to #1245, which effectively disables any Javascript when viewing assets. That is a problem for x.com which adds a <noscript> tag that effectively hides the actual page content in favor of the message you see there. See also the related security advisory on why it was disabled.

FWIW, you can still download a snapshot and then open it in the browser, so it's not like the file itself is broken. It's just that viewing that file from within linkding doesn't work.

Will have to think about this. Maybe allow users to opt-in to JS in the user profile, then it is your choice whether you trust any scripts that might be in an HTML file. Sanitizing the HTML in linkding itself would also be an option, though that opens another can of worms.