2 ms·

Can't you just comb through the HTML for the href? Then the text of the hyperlink doesn't matter.

• gruez 3y ago
  The point is that by doing so, you can smuggle the attachment past anyone who's reading the comment section, yet still appears to the system as a legitimate attachment.
  • hn_acker 3y ago
    The thread OP's comment was: > This seems simple to fix - deactivate all links that didn’t become part of a published comment. Currently, a major convenience for the malware spreader is being able to put malware on the server and get a usable URL back without submitting the comment. Deactivating links for unsubmitted comments that were canceled is orthogonal to identifying malware, and wouldn't make the comment readers more vulnerable than they already are.