Middle click on a link bypasses External Link Warning

(#604) Bug Awaiting confirmation desktop security

Summary

When I middle click/scroll wheel click/mouse button 3 click a link, the link automatically opens in the browser window. This bypasses the External Link Warning that shows up when you click on a link normally. I would expect the External Link Warning to show up as it has not been marked as a trusted site by the user repost of Issue #399 that was closed with V2, issue still persists in desktop client at least.

Steps to reproduce

  1. find a link in a server or DM that has not been set to Trusted in the External Link Warning dialouge
  2. middle click the link
  3. the website opens in your browser with no warnings

Environment

stable build 508 (3250c73), 2026-06-06 21:26:08 UTC, Electron 39.2.7, Windows 11 10.0.26200 (x64), desktop stable 0.0.8 Canary Desktop 2026.602.31138, Web 2026.605.11941, Windows 11 10.0.26200 (x64), Electron 41.2.2, Chrome 146.0.7680.188, Node 24.14.1, Locale en-US

Merged posts

These posts were merged into this one. Their comments are now part of the conversation below, marked with where they came from.

Merged from #399 Middle click on a link bypasses External Link Warning

RexSystemoriginally by @EXOgreen on GitHub

Report details

Summary

When I middle click/scroll wheel click/mouse button 3 click a link, the link automatically opens in the browser window. This bypasses the External Link Warning that shows up when you click on a link normally. I would expect the External Link Warning to show up as it has not been marked as a trusted site by the user

Steps to reproduce

  1. find a link in a server or DM that has not been set to Trusted in the External Link Warning dialouge
  2. middle click the link
  3. the website opens in your browser with no warnings

Environment (optional)

  • stable build 84 (356bd53), 2026-03-06 03:57:38 UTC, Electron 39.2.7, Windows 11 10.0.26200 (x64), desktop stable 0.0.8

2 comments

Sign in with Fluxer to comment and vote.
Comment by Rex
RexSystem 1 vote
Status changed from Fixed to Awaiting confirmation
This was closed in a bulk cleanup before Fluxer V2 without being checked or fixed. It may work now, so it is waiting for someone to confirm whether the bug still happens.
Comment by ternera
terneraMod 1 vote Merged from #399 originally by @ternera on GitHub
Can reproduce on stable build 84 (356bd53), 2026-03-06 03:57:38 UTC, Electron 39.2.7, macOS 26.3.1 (arm64), desktop stable 0.0.8