Skip to content

Conversation

yadue
Copy link
Contributor

@yadue yadue commented Sep 8, 2022

fixes #377

@dbrgn
Copy link

dbrgn commented Sep 8, 2022

Note: This solution is no ideal because it will also strip RTLO characters from text completely unrelated to URLs.

(Another solution proposed by @yadue is here: #388)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Autolinker vulnerable to RTLO URL spoofing attacks

2 participants