Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports ...
Some tricks that used to work no longer do—but this one is pretty reliable.