Skip to content

Instantly share code, notes, and snippets.

@jed
Last active December 27, 2015 15:09
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jed/7345401 to your computer and use it in GitHub Desktop.
Save jed/7345401 to your computer and use it in GitHub Desktop.
Use U+200B to evade Twitter's DM malware flagging

Use this bookmarklet to escape the URL of the current page and evade Twitter's broken malware link flagging. It prepends all periods with a zero-width space, which Chrome, Firefox, and Safari all seem to ignore. Twitter's server won't recognize it as a link (yet), but the Twitter client will, which means it remains clickable in the DM pane.

For example: https://twitter.com/ will get flagged as malware in a DM, while https://twitter​.com/ won't. They look the same, but the latter has a ZWSP before the . in .com.

javascript:prompt(0,location.href.replace(/\./g,"\u200b."))._
@buritica
Copy link

buritica commented Nov 6, 2013

h4x0r

@jed
Copy link
Author

jed commented Nov 7, 2013

see also @getify's hack.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment