Skip to content

Conversation

yadue
Copy link
Contributor

@yadue yadue commented Sep 8, 2022

fixes #377

@dbrgn
Copy link

dbrgn commented Sep 8, 2022

Note: This solution is no ideal because it will also strip RTLO characters from text completely unrelated to URLs.

(Another solution proposed by @yadue is here: #388)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Autolinker vulnerable to RTLO URL spoofing attacks
2 participants