When having a trigger covering URLs or an Indicator genreated from an URL Observable, URL is clickable in the notification or the description

[SamuelHassine]

Description

When having a trigger covering URLs, URL is clickable in the notification

This can be malicious!

=> In the notification content, continue to parse markdown, but put an exception on URL automatic parsing.

[nino-filigran]

Even though there's a confirmation pop up that appears when trying to click on the URL, it seems indeed safer to avoid making it clickable and instead let the user copy/pasting the url if the user wishes to navigate to the url.

Pop up:

[rguignard]

Same security issue with "default descriptions" associated to indicators created from the option "Create an indicator from this observable".
Example: Create an observable of type "Domain" with a value like "www.mydomain.com" and select "Create an indicator from this observable". On the newly created indicator, the value of the domain is clickable in the description.

opencti/opencti-platform/opencti-graphql/src/domain/stixCyberObservable.js

Line 136 in 5a85a82

: `Simple indicator of observable {${indicatorName}}`,

I think it would be better to delete this default description.