- **status**: review --> closed
--- **[tickets:#8599] show domain on external links, if misleading** **Status:** closed **Milestone:** unreleased **Created:** Fri Mar 27, 2026 08:53 PM UTC by Dave Brondsema **Last Updated:** Tue Mar 31, 2026 04:19 PM UTC **Owner:** Dave Brondsema When showing links (e.g originating from markdown, but really any html output) we should do something about links that could be misleading. For example with `<a href=https://evil.com/>sourceforge.net/auth/</a>` we could automatically append `(evil.com)` into the output so its obvious when its misleading. We should also check for non-ascii domain names (IDN) and if they have chars that are potentially confusing with normal ascii, then show the decoded domain name (even if the link & text match, if the chars could be confusing) --- Sent from forge-allura.apache.org because [email protected] is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
