Post #1305495
2026-02-11 15:16 UTC
As I understood it, there can be specifically crafted links in Markdown documents, which, when clicked, will download a file and then execute it.
Replies (1)
-
@kernelle@lemmy.dbzer0.com 2026-02-11 17:41
RCE means exactly this, the ability to run any code on a remote device (the one running notepad). It's a parsing issue. I've encountered the same writing an MD parser for a website, not as trivial to solve as it seems. For a multi billion dollar company this is hilariously stupid. Why do I get the feeling someone vibecoded this entire implementation.