Text Mesh Pro - Could Rich Text / Escape Characters Be Abused?

Unity Engine
1

Maybe a bit of a dumb question but what would be the worst way (if there’s any) a user with an input field could abuse rich text editing / escape characters … anything like this to ruin the user experience for other users seeing the text?
would it be only visual or could he for example type <link=“scam.exe”> inside the input field and spread a virus ;)?

i don’t want to disable these options if possible since i’m using them myself.

Cheers

2

Tags that are not understood or invalid are simply displayed as text. It is not possible to hijack a tags like in your example <link=“scam.exe”> as for example “<link=“ID”>the words the show up” the ID just represents a unique ID for you in your own code to know what tag is being interacted with and to implement some functionality based on that ID. So this is just an ID and doesn’t do / mean anything. It is passive.

1 Like