From ebea06b687fa1dc6ef08a02a475bc7c786940f2c Mon Sep 17 00:00:00 2001
From: timedout <git@nexy7574.co.uk>
Date: Sat, 20 Jun 2026 16:03:24 +0100
Subject: [PATCH] fix: SEC11

---
 src/service/media/preview.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/service/media/preview.rs b/src/service/media/preview.rs
index f43bef40e..f0270d3b3 100644
--- a/src/service/media/preview.rs
+++ b/src/service/media/preview.rs
@@ -423,7 +423,7 @@ pub fn url_preview_allowed(&self, url: &Url) -> bool {
 							 url_preview_domain_explicit_denylist (check 1/3)",
 							&root_domain
 						);
-						return true;
+						return false;
 					}
 
 					if allowlist_domain_explicit.contains(&root_domain.to_owned()) {