Telegram Restricts Widgets After Security Vulnerability Reports

Telegram has restricted the use of HTML widgets by standard bots in private conversations. This change was confirmed by a contributor to the platform's bot API repository following reports of errors when sending these interactive messages.

HTML widgets allow code to run directly within a message. The design of this feature includes direct connections to digital wallets and transaction data on the TON network. The restriction aims to mitigate risks associated with security flaws identified in older versions of the application.

Researchers pointed to vulnerabilities that would allow code execution without user interaction. According to the research archive, these vulnerabilities affected older clients and have been addressed in current Telegram builds. The block does not affect the operation of traditional bots or Mini Apps that open external pages.

This security measure impacts the ecosystem of decentralized applications integrated into the messenger. The market is observing how these changes affect the usability of wallets and financial services that rely on Telegram's bot infrastructure.