Website

Create a role. 2 .The role settings, specifically permissions and order, are modified. This applies to both newly created roles and existing ones. Clicking "save" doesn't work. Also, an error like the one in the attached file appears in the console. Group page: https://vrc.group/VMACHO.3774 -- original 1.ロールを作ります。 2.ロールの設定、具体的にはパーミッションやorderを変更します。これは、新しく作ったものも、既存のものも同じです 3.save をクリックしても機能しません。また、コンソールに添付ファイルのようなエラーが表示されます。

When logging in to vrchat.com/home with Safari on macOS Sonoma & up, website gets stuck in a login loop. Process goes as follows: User is redirected to login page User logs in User enters their 2FA The home dashboard is displayed for about 1 second, complete with accurate user info Console reports "[AuthorizedRoutes] Failed to load user, going to /login" Login immediately reloads Additional notes: Clearing Website Data (Cookies + Cache) followed by a complete quit of the web app or Safari instance hosting the VRChat website previously provided a temporary workaround. As of macOS Sequoia this no longer works.

There exists a method in which anybody can launch group public instances for any group, even if they do not belong to that group. This was confirmed to be the case with the permission turned off for the "Everyone" role. This does not require any tooling, external programs, direct access to the API, or changes to the VRChat client. This includes groups that are closed and invite-only. The only exception to this is if the member is already banned from the group. What does this actually mean for you? Malicious instances could be opened in opposition to a group's values. For example, a group supporting those who have PTSD from war would not want a group public instance opened in a warzone map. Groups that only open moderated instances by policy could have public unmoderated instances opened on their behalf without approval. Groups representing staff or brand ambassadors could have public instances opened on their behalf without approval. I initially informed VRChat of this on 09/11/2024 via the App/Website Security Exploit Report form under ticket #441683. Per the form: "We do not guarantee a response other than the automated "ticket received" notification." And that's all I've gotten. Unfortunately, this means that I have no way of knowing if VRChat is still actively aware of this exploit, if they plan to take ownership, or when a fix is expected. Precautions you can take as group owners: Monitor your instance lists. Also monitor your audit logs in Settings -> Logs via the group page on the VRChat website. I have intentionally left out the method, but it is trivial and only a matter of time before others figure it out, if they haven't already. Staff can check the ticket provided for the method.

Even if I click on the joinfriend tab, it doesn't display for a long time When I run it with Devtools, I can see the following error: "error": { "message": "User usr_******************* not Found", "status_code": 404 Is this my responsibility? A support request has been submitted for this.

There is a setting toggle labeled "Push" on the messages page. When I toggled on, the confirmation popped up (see the attached image). But no action happens when messages come. I expected that when a message came, it would appear as a system-level notification (aka desktop notification). Note. I think this lacks a piece for the Offline Invites feature. Currently, you have to keep the web page open and frequently see the mail icon at the top to recognize the invitation. That significantly decreases its usefulness. It turned off after reloading the page. I tested with the latest Chrome and Firefox.

It’s just impossible to use the Website on Safari for iOS. What the heck? If it helps, I’m on iOS 18.0 and I also have the VRChat Closed Beta App installed on my device. See Video proof: https://youtube.com/shorts/dsDyGoR3rgk?si=aImUO1jC6ZtRqtG_

Go to the website home page and count your online friends in the wing. Scroll down in the wing till the first time the scrollbar changes size (loading more entries) Scroll back up to the top. Observe that there are roughly double the number of friends online than when first observed. There doesn't seem to be any pattern as to which friends don't show up other than that it doesn't affect friends where their current instance is visible. It's been an issue since the "online on other platforms" update.

It seems that when you post the url for the VRChat world on X (Twitter), the link is not working properly under certain conditions. If the world's web site has a video thumbnail as an introduction, clicking on the link posted on X will play the video, but will not take you to the world's page. This phenomenon seems to have occurred after the recent change in the specification for pasting URLs in X. The same phenomenon occurs when I click on a link in a past post, not a newly posted one. I am not sure if this is a problem that can be addressed on the VRChat side, but I would appreciate a fix.

I don't know how it broke (image). What I wanted to write was "It’s time! Version 2.0.0 of #CAHppe is now publicly available on Gumroad and the Booth library! And surprise... OSC support is now supported!"

If I block "extreme horror" worlds from the worlds menu inside the vrchat client, these worlds still show up as normal on the website.