That of course heavily depends on the people you hang around with
, but I see your point.
I the link is just clickable, then it is just a link like any other link on the internet, so it's up to you wether you click it or not. If you use Firefox as your browser, securitywise there is not too much to worry about.
If MSGPlus would download the file, to see if it is a real .rss feed, it is defiinitly up to MSGPlus to prevent itself from malicious data being sent.
That should be codable, i reckon. Especially for patchou, our hero
)
