Add confirmation box for suspicious urls.

Telegram/SourceFiles/core/click_handler_types.cpp

@@ -51,9 +51,14 @@ void HiddenUrlClickHandler::Open(QString url, QVariant context) {
 		if (UrlRequiresConfirmation(url)
 			&& QGuiApplication::keyboardModifiers() != Qt::ControlModifier) {
 			Core::App().hideMediaView();
-			const auto displayUrl = parsedUrl.isValid()
+			const auto displayed = parsedUrl.isValid()
 				? parsedUrl.toDisplayString()
 				: url;
+			const auto displayUrl = !IsSuspicious(displayed)
+				? displayed
+				: parsedUrl.isValid()
+				? QString::fromUtf8(parsedUrl.toEncoded())
+				: ShowEncoded(displayed);
 			Ui::show(
 				Box<ConfirmBox>(
 					(tr::lng_open_this_link(tr::now)

Telegram/SourceFiles/core/ui_integration.cpp

@@ -66,6 +66,11 @@ std::shared_ptr<ClickHandler> UiIntegration::createLinkHandler(
 		const QString &data,
 		const TextParseOptions &options) {
 	switch (type) {
+	case EntityType::Url:
+		return (!data.isEmpty() && UrlClickHandler::IsSuspicious(data))
+			? std::make_shared<HiddenUrlClickHandler>(data)
+			: nullptr;
+
 	case EntityType::CustomUrl:
 		return !data.isEmpty()
 			? std::make_shared<HiddenUrlClickHandler>(data)

Telegram/SourceFiles/history/history_widget.cpp

@@ -3649,7 +3649,7 @@ void HistoryWidget::botCallbackDone(
 					updateSendAction(item->history(), SendAction::Type::PlayGame);
 				}
 			} else {
-				UrlClickHandler(link).onClick({});
+				UrlClickHandler::Open(link);
 			}
 		}
 	});

Telegram/SourceFiles/history/view/media/history_view_web_page.cpp

@@ -127,7 +127,8 @@ QSize WebPage::countOptimalSize() {
 			}
 			return true;
 		}();
-		_openl = previewOfHiddenUrl
+		_openl = (previewOfHiddenUrl
+			|| UrlClickHandler::IsSuspicious(_data->url))
 			? std::make_shared<HiddenUrlClickHandler>(_data->url)
 			: std::make_shared<UrlClickHandler>(_data->url, true);
 		if (_data->document

Telegram/SourceFiles/overview/overview_layout.cpp

@@ -1619,7 +1619,9 @@ const style::RoundCheckbox &Link::checkboxStyle() const {
 Link::LinkEntry::LinkEntry(const QString &url, const QString &text)
 : text(text)
 , width(st::normalFont->width(text))
-, lnk(std::make_shared<UrlClickHandler>(url)) {
+, lnk(UrlClickHandler::IsSuspicious(url)
+	? std::make_shared<HiddenUrlClickHandler>(url)
+	: std::make_shared<UrlClickHandler>(url)) {
 }
 
 } // namespace Layout

Telegram/lib_ui

@@ -1 +1 @@
-Subproject commit 40084cab9577064436e2b381c27f498ac4a210a3
+Subproject commit 725d768f0ff1c22f6b477c28c324c20cbf2419da