Seems the admins of beehaw are quite trigger-happy with things like this. I don't think this is healthy. I know how responsible disclosure works and stuff. But usually you hotfix things and then update. And the communication isn't what i'm accustomed to in free software communities. I don't know. I also didn't like the idea of splitting the network by going easy on the 'defederate' button, causing all sorts of confusion. This seems to be the continuation of their short-sighted behaviour.
Edit: Oh wow, maybe some drastic measures are warranted after all, if everyone can inject javascript everywhere. And it's kind of a beginner's mistake to not check user input and strip html tags. Let's see how severe this is. ( https://lemmy.world/post/1290412 )