Darkscribes Community

@jasonwch I blame AI for exposing DNS rebinding as a problem at all.

@jasonwch is the plugin still active? ./nodebb plugins

Also links to expand must be made on a separate line

@[email protected] the fediverse is pulling a @[email protected] by playing dumb, asking basic ActivityPub questions, and watching the fireworks fly.

@[email protected] "hey bud, can I work in?"

<img class="not-responsive emoji" src="https://community.nodebb.org/assets/plugins/nodebb-plugin-emoji/emoji/android/1f606.png?v=b3bda0f1f23" title="" />

@jasonwch try latest develop branch if you don't want to wait for 4.15

@Moshe most likely you'll want to run ./nodebb build again, and watch the console output for errors.

@Moshe send over the full stack trace.

Edit: And not seeing any issue on both sites I run. Make sure you have fully updated NodeBB and rebuilt assets.

@jasonwch latest NodeBB should have this patched already, thanks.

@jasonwch no, I javent looked into the issue yet 🫤

> julian said:
>
> the Activity Intents behaviour is meant to be active even if federation is disabled.

Actually, you're right, it's not meant to work without federation

@jasonwch the Activity Intents behaviour is meant to be active even if federation is disabled.

I'll fix up the behaviour so it is consistent even if federation is disabled.

@Moshe no that's not what I mean.

If the plugin cached private, sensitive data, that is an information disclosure vulnerability.

The plugin acting as a guest and not a logged in user is a feature, not a bug.

@baris I think that's best case.

Link preview accesses as guest and caches it so we wouldn't want to leak any info out accidentally.