Unfortunately, he's right: we don't let there be different text for the link than the text in the url, so it's not possible to have a link to <a href="myurl">short text</a>
, only things like <a href="http://myurl.com">http://myurl.com</a>
. This is somewhat mitigated by the fact that we'll truncate the url when displaying in an Asana text box (it will run on for some characters, then terminate with "..."), so extremely long urls shouldn't cause too many text layout issues. This is enforced at render time, so there's not a way to do this with the API either.
There are a number of reasons for this - security, as he mentioned, is one; more clarity is better here. We've got some customers that don't want to enable, for instance, <a href="http://hijacker.com/pwned">example.com<\a>
links that their non-technical users might encounter without thinking about it - basically, they don't want the same level of paranoia in Asana as is required to be a responsible email user, so we went WYSIWYG here.
I'd be interested, however, if you could come up with a compelling use case for why this is necessary. We're always up for getting feedback!