VulnerabilitiesTelegram Desktop bug let a hidden script steal chats from saved conversations
Researchers at ExPatch showed how a single bot message could hide JavaScript inside an HTML chat export, then quietly copy every message when the file was opened.
