Only Lemmy instances with custom emoticons were affected based on the Recap of the Lemmy XSS incident. So if Lemmy.ml doesn’t have these it should not have been affected.

So it works by fetching replies from Mastodon. We can see Mastodon users here by searching for their profile (like @[email protected] ) but that does not list any of their posts as Lemmy is not able to show messages that are not part of a post/magazine. Is there any way that we can find the messages trough a direct link?