Skip to content

Instantly share code, notes, and snippets.

@jed
Last active Dec 27, 2015
Embed
What would you like to do?
Use U+200B to evade Twitter's DM malware flagging

Use this bookmarklet to escape the URL of the current page and evade Twitter's broken malware link flagging. It prepends all periods with a zero-width space, which Chrome, Firefox, and Safari all seem to ignore. Twitter's server won't recognize it as a link (yet), but the Twitter client will, which means it remains clickable in the DM pane.

For example: https://twitter.com/ will get flagged as malware in a DM, while https://twitter​.com/ won't. They look the same, but the latter has a ZWSP before the . in .com.

javascript:prompt(0,location.href.replace(/\./g,"\u200b."))._
@buritica

This comment has been minimized.

Copy link

@buritica buritica commented Nov 6, 2013

h4x0r

@jed

This comment has been minimized.

Copy link
Owner Author

@jed jed commented Nov 7, 2013

see also @getify's hack.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment