BuddyPress.org

bp_activity_at_name_filter_updates uses a reg ex to find @name mentions of users in output HTML. However, it does not distinguish between “foo bar @name I say” and … src=”@name@mastodon.social”. Any use of the user name in URL or other elements of a HTML tag will cause HTML a href tag where they are not wanted or expected to be.