

The remote code execution isn’t “via a text file”. It’s via a link in a text file, which Notepad now lets you actually click.
Just don’t click on links you don’t know the destination of (Notepad shows the destination for https links at least, on hover) and you don’t have any remote code executing.


Is there a reason the room icons have to be humongous, at least in the web version on PC?
Other than that, looks great.