Raccoon :verified: on Nostr: I noticed a #vulnerability with the way #Mastodon displays link previews earlier that ...

I noticed a #vulnerability with the way #Mastodon displays link previews earlier that I haven't gotten around to reporting on the GitHub.

There was a spammer using a link with a preview that was basically a screenshot of an image behind a CW, making it look like there was an image to unhide, but when you tried to click it, it would send you to the website they had linked. I also saw a variant with a fake video preview.

It is very hard to tell the difference between this fake image and a real one, and I think that needs to be changed, perhaps with something perhaps with something that makes it clearer that you are looking at a link preview, and will be taken to a website if you click it.