Telegram curbs new in-chat apps amid a no-tap hacking scare

Ordinary bots can no longer send the interactive messages. Researchers say the reported flaws affected older Telegram apps and are fixed in current builds.

Telegram has blocked ordinary bots from sending its new interactive in-message apps, known as HTML widgets, even in private chats. A November 13 reply in its Bot API repository confirmed the restriction as researchers and Telegram disputed security flaws in the feature.

Responding to a developer's report of failed widget messages, Telegram Bot API repository contributor levlam confirmed the restriction : “Yes, currently, general bots aren't allowed to use widgets even in private chats.” The developer reported receiving the error INPUT_MEDIA_WIDGET_NOT_ALLOWED after previously sending widgets successfully.