[Users] Fancy loads link even though not wanted

[Paul]

On Fri, 5 Mar 2021 21:08:53 +0100
Johan Vromans <jvromans at squirrel.nl> wrote: 

> Nevertheless I have a message that, when opened, immedeately activates a
> link in my browser. How can this happen?
> 
> I suspect this piece of the message:
> 
> <iframe width="560" height="315" frameborder="0" 
>  src="https://www.youtube.com/embed/P9gz32TJeCI?start=110"
>  allow="accelerometer; autoplay; clipboard-write; encrypted-media;
> gyroscope; picture-in-picture" allowfullscreen=""></iframe>  
> 
> The sender is thrustworthy. Full message attached.

I can verify the behaviour, and also think the problem is in the handling of
iframes.

with regards

Paul