element-x-android
element-x-android copied to clipboard
element-hq
Warn if link text doesn't match link target
Steps to reproduce
- Send a link with a different target, like for instance
[https://example.org](https://evil.org/) - User will think is is opening https://example.org, but the device will open https://evil.org/
Outcome
What did you expect?
A dialog should be displayed to warn the user about the host not matching
What happened instead?
https://evil.org/ is opened without any warning.
Element Android similar issue: https://github.com/element-hq/element-android/issues/922
Your phone model
No response
Operating system version
No response
Application version and app store
No response
Homeserver
No response
Will you send logs?
No
Are you willing to provide a PR?
No
Actually, it seems that EXA is opening https://example.org/, which is a bug to also fix, but which is mitigating the problem.
A regular markdown link (for instance [test](https://matrix.org/)), is rendered like this:
When the text is also a link, this is rendered like this, so there is some of inconsistency in link rendering.
@bmarty can we close this issue as duplicate of https://github.com/element-hq/element-x-android/issues/4290 (more recent one)?
