Telegram Beta Tests HTML Interactive Messages
Telegram Android Beta 13.2 introduces an experimental feature called HTMLBubbles, which allows direct rendering of interactive messages with HTML, CSS, and JavaScript within chats, eliminating the need to open a Mini App. A similar component has also appeared in the iOS beta of the same version. The feature remains experimental, with restricted sending permissions and an undisclosed developer API, and lacks a toggle to disable it in the beta settings. The editorial team is concerned that…
Telegram Android Beta 13.2 has introduced an experimental feature called HTMLBubbles, which allows for the direct rendering of interactive messages with HTML, CSS, and JavaScript within chats, without needing to open a Mini App. A similar component has also appeared in the corresponding iOS Beta version.
This feature is still experimental. The ability to send such messages is restricted, the developer API has not been made public, and there is no toggle to disable it in the Beta settings. The editorial team is concerned that executing JavaScript within messages could potentially introduce zero-click vulnerabilities.
Source: Telegram Info
