Ihor Radchenko <yanta...@posteo.net> writes:
> Ihor Radchenko <yanta...@posteo.net> writes:
>
>> I just released Org mode 9.7.5 that fixes a critical vulnerability.
>> The release is coordinated with emergency Emacs 29.4 release.
>
> This one is another potential issue (or a feature) we have found while
> discussing the main vulnerability.
>
> Currently, one can create an Org file like
>
> #+LINK: https https://fake-gmail-login-page.xyz/
> [[https://gmail.com]]
This is no different from:
[[https://fake-gmail-login-page.xyz][https://gmail.com]]
In both cases, mousing over the link will show you the actual target address.
On the other hand, having different faces for "plain" links (links where
the text in the buffer matches the link target) and special links would
be kind of nice.
