Google AdWords Exploit Seen in the Wild

Re:Google AdWords Exploit Seen in the Wild by username223 on Wednesday May 08, 2019 @11:32AM (#19859773)

I also think mail clients should do that, or at least offer it as an option. Most mail readers have an option to disable loading remote content, and this would be another little way to make HTML email less dangerous.

I think (or at least hope) that most people are in the habit of hovering over links in email before clicking them. And I really hope that mail readers never start implementing Javascript. As for web apps, that's the Wild West, and a small fix like this isn't going to tame it.

[ Parent | on HN ]

Re:Google AdWords Exploit Seen in the Wild by jdironman on Wednesday May 08, 2019 @11:54AM (#19860062)

Maybe, quite simple have the option to parse <a> tags down to the format "Text - URL". If I remember correctly, some sites from way back had this sort of format occasionally.

[ Parent | on HN ]

Re:Google AdWords Exploit Seen in the Wild by tmefq on Wednesday May 08, 2019 @12:39PM (#19860550)

WordPress does it in the admin interface. A very clever hack. Something like:

    a:after {
        content: attr(href);
        display: inline-block;
        padding: 0 1ex;
    }

[ Parent | on HN ]

Re:Google AdWords Exploit Seen in the Wild by scarface74 on Wednesday May 08, 2019 @09:24PM (#19864533)

You give way too much credit to users if you think they hover over links and users can’t hover over links on mobile devices.

[ Parent | on HN ]