Please disable links around inline images

Title:

  1. What is your original issue/pain point you want to solve?

Security.

  1. Which are one or two concrete situations where this problem hurts the most?

If an agent clicks the image and falls for the scammer.

  1. Why is it not solvable with the Zammad standard?

Zammad does allow links around inline images.

  1. What is your expectation/what do you want to achieve?

I would like to see zammad not allow (remove) links around inline images.

Example:
just got this in a ticket. The image was a very bad quallity image to lure the agent to click on it:
image
(This is not modified. This is the original image.)

On click the agent opens a website - in example a zip file download … .

<a href="https://dl.dropboxusercontent.com/...AMZ-Bank-berweisung.zip?rlkey..." rel="nofollow noreferrer noopener" title="https://dl.dropboxusercontent.com/..." target="_blank">
    <img alt="" src="data:image/png;base64,iVBO...kJggg==" style="max-width:100%;">
</a>
1 Like