Lynx has mechanisms to avoid spoofed 'special URLs'. The protections are insufficient and can result in local compromise.