<story><title>Stealing Downloads from Slack Users</title><url>https://medium.com/tenable-techblog/stealing-downloads-from-slack-users-be6829a55f63</url></story><parent_chain></parent_chain><comment><author>klyrs</author><text>I&amp;#x27;ve always found Slack&amp;#x27;s link handling to be weird and annoying.  Show me the URL I&amp;#x27;m going to be sent to, and stop clickjacking.  Please.  My company has an internal domain, so when we link to internal docs, it splats because Slack can&amp;#x27;t resolve the hostname.  And we&amp;#x27;re paying for this inconvenience.</text></comment>
<story><title>Stealing Downloads from Slack Users</title><url>https://medium.com/tenable-techblog/stealing-downloads-from-slack-users-be6829a55f63</url></story><parent_chain></parent_chain><comment><author>Gaelan</author><text>It intrigues me that (per the screenshot in the post) slack appears to bundle uncompiled TS source in their app. You&amp;#x27;d think that they&amp;#x27;d just have a single JS bundle so their code wasn&amp;#x27;t so easy to reverse engineer.</text></comment>