- Affected version
- 2.2.8 Patch 1
XF\BbCode\ProcessorAction\AnalyzeUsage::analyzeUnfurlUsage
is written as a final hook, meaning it works on final text and not per tag via a tag hook which has access to parsed options. This causes the code to need to extract/detect the unfurl attribute and url contents twice.This results in the unfurl format in the analyzer being very fragile, and doesn't really matched how unfurl handling works elsewhere.
For example;
[url test="1" unfurl="true"]https://xenforo.com/community[/url]
Will render as an unfurled tag, but analyzeUnfurlUsage will not detect it.