comunes/tane
1
0
Fork 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions

feat(chat): disallow links in messages

Browse source 
Local-first chat between people whose web of trust is still forming is a
natural phishing/scam vector, so messages may not contain URLs. A
conservative `containsUrl` rule (explicit scheme, www., or a common-TLD
domain — but not "3.5kg" or "12.30") gates it: the composer warns and
keeps the text for editing, and MessagesCubit.send drops any URL as a
backstop. Incoming text was already non-tappable (plain selectable text).
This commit is contained in:
vjrj 2026-07-11 07:14:58 +02:00
parent d481e62ff7
commit a461106dbf
14 changed files with 107 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apps/app_seeds/lib/i18n/strings_pt.g.dart
View file

@ -771,6 +771,7 @@ class _Translations$chat$pt extends Translations$chat$en {
@override String get today => 'Hoje';
@override String get yesterday => 'Ontem';
@override String get sendError => 'Não foi possível enviar — verifica a tua ligação';
@override String get noLinks => 'Não são permitidos links nas mensagens';
}
// Path: trust
@ -1622,6 +1623,7 @@ extension on TranslationsPt {
'chat.today' => 'Hoje',
'chat.yesterday' => 'Ontem',
'chat.sendError' => 'Não foi possível enviar — verifica a tua ligação',
'chat.noLinks' => 'Não são permitidos links nas mensagens',
'trust.none' => 'Ainda ninguém os avaliza',
'trust.count' => ({required Object n}) => 'Avalizada por ${n}',
'trust.vouch' => 'Conheço esta pessoa',