Local-first chat between people whose web of trust is still forming is a natural phishing/scam vector, so messages may not contain URLs. A conservative `containsUrl` rule (explicit scheme, www., or a common-TLD domain — but not "3.5kg" or "12.30") gates it: the composer warns and keeps the text for editing, and MessagesCubit.send drops any URL as a backstop. Incoming text was already non-tappable (plain selectable text). |
||
|---|---|---|
| .. | ||
| ast.i18n.json | ||
| en.i18n.json | ||
| es.i18n.json | ||
| pt.i18n.json | ||
| strings.g.dart | ||
| strings_ast.g.dart | ||
| strings_en.g.dart | ||
| strings_es.g.dart | ||
| strings_pt.g.dart | ||