sort of related - I recently had an incident with a school app where children can upload and showcase work, leave messages for parents, etc. a message was sign

sort of related - I recently had an incident with a school app where children can upload and showcase work, leave messages for parents, etc. a message was signed by a seven-year-old as "love from {child's name}.xxx" - three kisses with no whitespace after the full stop interestingly, certain operating systems decided to treat this as a hyperlink with typical styling. remarkably, since .xxx is a valid TLD and {child's name} is a popular name, the link resolved to an active domain which forwards the user to a homonymous adult performer's Brazzers profile on a school app!