mirror of
https://github.com/TheFunny/TelegramTwitterMediaBot.git
synced 2026-09-23 23:32:05 +00:00
Post URLs and author URLs were interpolated raw into <a href> attributes (and the raw user URL from empty_fetched into caption text), so crafted links could break the HTML parse and fail the send with a 400. All attribute interpolations now use encode_double_quoted_attribute; text stays encode_text.