Comment by tjoff

Yeah, because more complexity where you don't expect it doesn't cost anything?

Up until 5 hours ago this fix was not present:

> The displayed target is sanitized so invisible and line-breaking characters cannot conceal the effective destination.

https://github.com/ghostty-org/ghostty/security/advisories/G...

The sensible default is to have it turned off. And by the looks of it Ghostty versions before this you couldn't even turn it off.