3 ms·

This has nothing to do with the fact that signal is based on electron. Whatsapp has a very similar client and it works perfectly with the mentioned snippets. Bo

This has nothing to do with the fact that signal is based on electron. Whatsapp has a very similar client and it works perfectly with the mentioned snippets. Both copy and paste work flawlessly.

floatingatoll 6y ago
The theory there is that apps that are not HTML webapps in an Electron wrapper are less likely to have HTML encoding bugs in fields that shouldn't be parsing HTML special characters < > & because native apps wouldn't have HTML anywhere in their dependencies at all. I think I agree that Electron apps are more likely to have HTML escaping bugs, but I've also rarely seen native iOS apps have HTML escaping bugs, so clearly neither vulnerability nor resilience are guaranteed.