Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://federation.network/notes/9i6yk8plg9csebyb">:fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞 (markuswet@federation.network)'s status on Wednesday, 09-Aug-2023 17:23:54 JST</a><a href="https://federation.network/@markuswet" title="markuswet@federation.network"><img src="https://gnusocial.jp/avatar/158853-48-20230809082354.webp" width="48" height="48" alt=":fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞" style="position: absolute; left: 0; top: 0;">:fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞</a><div><a href="https://federation.network/notes/9i6y3gjkn11l21uz" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><p><a href="https://toot.fedilab.app/@apps">@apps@toot.fedilab.app</a> OK, after a bit of further testing: This is a side effect of hashtags with Umlauts. They seem to create a hyperlink to the sender's instance.<br><br>Firefish somewhat exposes that "hijacking" attempts by displaying a small icon next to the link, as well as showing the link preview below the post.<br><br>Maybe something to just keep in mind, when you go forward with the Markdown support. 🙇</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/1905328#notice-3782505">In conversation</a><time datetime="2023-08-09T17:23:54+09:00" title="Wednesday, 09-Aug-2023 17:23:54 JST">Wednesday, 09-Aug-2023 17:23:54 JST</time> <span>from <span><a href="https://gnusocial.jp/notice/3782505" rel="external" title="Sent from gnusocial.jp via ActivityPub">gnusocial.jp</a></span></span><a href="https://gnusocial.jp/notice/3782505">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/1385651">Fedilab screenshot of Test Toots with Umlaut hashtags</a></label><br><a href="https://content.federation.network/f/webpublic-387af275-0ac3-44b5-be37-627703a195f5.webp" rel="external">https://content.federation.network/f/webpublic-387af275-0ac3-44b5-be37-627703a195f5.webp</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/1385652">Mastodon screenshot with Umlaut hashtags and Markdown links trying to "hijack" hashtags</a></label><br><a href="https://content.federation.network/f/0cdb8304-a4f5-45f6-bd7d-30573c2a4200.png" rel="external">https://content.federation.network/f/0cdb8304-a4f5-45f6-bd7d-30573c2a4200.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/1385653">Firefish screenshot of Markdown hashtags</a></label><br><a href="https://content.federation.network/f/80dc2853-25ee-480a-85b0-1e2835f2b14f.png" rel="external">https://content.federation.network/f/80dc2853-25ee-480a-85b0-1e2835f2b14f.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
:fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞 (markuswet@federation.network)'s status on Wednesday, 09-Aug-2023 17:23:54 JST:fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞
in reply to
- Fedilab Apps
@apps@toot.fedilab.app OK, after a bit of further testing: This is a side effect of hashtags with Umlauts. They seem to create a hyperlink to the sender's instance.

Firefish somewhat exposes that "hijacking" attempts by displaying a small icon next to the link, as well as showing the link preview below the post.

Maybe something to just keep in mind, when you go forward with the Markdown support. 🙇
In conversationWednesday, 09-Aug-2023 17:23:54 JST from gnusocial.jppermalink
Attachments

Public

Embed Notice

HTML Code

Corresponding Notice