I have done this accidentally a lot but if you make an error like this
This is a sentence.be happy about another sentence.
…at least in my lemmy client it automatically becomes a link.
I am not confident this is an issue but also I have noticed it and wanted to ask.
Its a feature of the markdown library we’re using in lemmy-ui (markdown-it) called linkify.
IMO the benefits of it outweigh the negatives. Its nice to be able to just type hexbear.net or something without having to add the https:// every time.
Thanks for the response! Yeah it is a really nice convenience.
I wish the default Lemmy client wouldn’t interpret text as a URL so aggressively. The workaround is to preface the period with a backslash, like so:
sentence\.beRelatedly, when I post raw links, I sandwich them in
<&, because sometimes the client won’t interpret the text aggressively enough such that some of the (usually long) URL fails to be included. The angle brackets don’t get rendered. Example: https://github.com/lemmynet/lemmy-markdown-it-pluginsNot an issue, the client has to recognize possible links.
As the other comment mentioned, you can edit the text to fix grammar errors.
My point is couldn’t someone exploit that with a website that has a url matching a common grammatical error of this type?
You could put the chicken before the egg too by making a bunch of bot comments hat appear plausible except for errors like that and then actually launch the website right?
If I “accidentally” link to that hostile website by making a totally normal “grammatical error” how do you establish intent?
From a zoomed out database/admin level how do you quickly tell the difference between the two in bulk amounts of posts/comments you can’t possibly search all the way through by hand…?
You can’t, which is why basic IT safety includes things like not clicking random links just because they’re there.
you can just edit the post. it’s not a problem
