[MlMt] Notes on latest test release and Gmail OAuth application verification

[Benny Kjær Nielsen]

On 2 May 2019, at 19:06, Michael Nietzold wrote:

> Maybe you can strip out the images links via text/replace before you 
> put the HTML into the WKWebView?

Security-wise, this can only by done if the WKWebView is used to parse 
the text itself (otherwise a difference between the WKWebView parser and 
whatever other parser I use would be an attack vector for getting around 
the URL stripper/replacement). Technically, I think this is possible, 
but I can also think of some potential caveats...

-- 
Benny
https://freron.com/become_a_mailmate_patron/