If spammers can abuse something, they gonna abuse it

  • Björn Tantau
    link
    fedilink
    455 months ago

    I mean, allowing arbitrary characters in the name is one thing. I think I would do that as well, as there are many weird names out there.

    But then actually parsing it out (or not escaping it properly), that’s the real sin.

    • @towerful
      link
      325 months ago

      Might be the mail client being helpful and going “hey! Thats a URL. Let me make it a link”