I was reviewing posts, and received the following as a test (unsure if link is specific to me): https://stackoverflow.com/review/triage/15049398
While it's obviously spam, it contains a link which could take a user to a malicious site. While it's unreasonable to expect link on SO to be clean, it would seem that this post now originates not from the original poster, but from SO itself. This is fully intentional as the system appears to only bring in very good or obviously spam posts as tests. So users are being provided with known-bad links by the SO Triage system.
This brings me to a question: is any effort made to ensure links in SO Triage tests are safe?
To which the answer is "no." as external links cannot be truly secured.
What, if anything should be done about this?
Possibilities
- this is fine
- don't include spam links (may nullify tests)
- buy up domains and don't list them (expensive)
- partner with another service who has a huge number of domains to set up fake spam links