<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Hidden link in email in Firefox Labs</title>
    <link>https://connect.mozilla.org/t5/firefox-labs/hidden-link-in-email/m-p/123825#M5069</link>
    <description>&lt;P&gt;I have observed a new phenomenon. The creator of a malicious email has somehow found a way to evade the&amp;nbsp; malicious link appearing in the lower left corner of the browser when one moves the cursor over it. I think it's important that you research this and fix it. I always roll over links in emails, mostly out of curiosity because I rarely click on them due to the danger that they provide. So I was puzzled. Investigating, I right-clicked on it, copied the invisible link, and pasted it into Notepad. There it was revealed. The line of code in the source reads:&lt;/P&gt;&lt;PRE&gt;&amp;lt;a href=3D"https://cloudstorageservices1.storage.googleapis.com= /21dbe470-5ea8-4b2e-82e7-f0b97c8f6da0.html"                style=3D"background-color:#2563eb; color:#ffffff; text-decor= ation:none; padding:14px 22px; display:inline-block; font-size:14px; font-w= eight:bold;"&amp;gt;                Update Payment Information             &amp;lt;/a&amp;gt;&lt;/PRE&gt;&lt;P&gt;The href=3D before the link appears to be tricking the browser, yet keeping the link active. I'm not a usual visitor to Mozilla/connect. So I would appreciate it if you could email me at &lt;A href="mailto:joedlh@yahoo.com" target="_blank"&gt;joedlh@yahoo.com&lt;/A&gt;&amp;nbsp;to report the result of your investigation.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Sun, 26 Apr 2026 15:37:01 GMT</pubDate>
    <dc:creator>joedlh</dc:creator>
    <dc:date>2026-04-26T15:37:01Z</dc:date>
    <item>
      <title>Hidden link in email</title>
      <link>https://connect.mozilla.org/t5/firefox-labs/hidden-link-in-email/m-p/123825#M5069</link>
      <description>&lt;P&gt;I have observed a new phenomenon. The creator of a malicious email has somehow found a way to evade the&amp;nbsp; malicious link appearing in the lower left corner of the browser when one moves the cursor over it. I think it's important that you research this and fix it. I always roll over links in emails, mostly out of curiosity because I rarely click on them due to the danger that they provide. So I was puzzled. Investigating, I right-clicked on it, copied the invisible link, and pasted it into Notepad. There it was revealed. The line of code in the source reads:&lt;/P&gt;&lt;PRE&gt;&amp;lt;a href=3D"https://cloudstorageservices1.storage.googleapis.com= /21dbe470-5ea8-4b2e-82e7-f0b97c8f6da0.html"                style=3D"background-color:#2563eb; color:#ffffff; text-decor= ation:none; padding:14px 22px; display:inline-block; font-size:14px; font-w= eight:bold;"&amp;gt;                Update Payment Information             &amp;lt;/a&amp;gt;&lt;/PRE&gt;&lt;P&gt;The href=3D before the link appears to be tricking the browser, yet keeping the link active. I'm not a usual visitor to Mozilla/connect. So I would appreciate it if you could email me at &lt;A href="mailto:joedlh@yahoo.com" target="_blank"&gt;joedlh@yahoo.com&lt;/A&gt;&amp;nbsp;to report the result of your investigation.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 26 Apr 2026 15:37:01 GMT</pubDate>
      <guid>https://connect.mozilla.org/t5/firefox-labs/hidden-link-in-email/m-p/123825#M5069</guid>
      <dc:creator>joedlh</dc:creator>
      <dc:date>2026-04-26T15:37:01Z</dc:date>
    </item>
  </channel>
</rss>

