Iāve just tried to share a link, and the shareable link Discource gave me was https://community.openstreetmap.org/t/official-statement-by-open-street-map-moderator/1054/4?u=someoneelse . In the context that I wanted to use it, the fact that that link included my userid wasnāt a problem, but Iād imagine that in most contexts it absolutely would.
Can the user be removed from share links by default?
6 Likes
nukeador
(RubĆ©n MartĆn)
April 7, 2022, 12:11pm
2
It seems this is being discussed upstream:
Currently, using the āShare a linkā or copying the URL associated with a postās timestamp results in a URL that contains the username of whoever does the copying, if that person happened to be logged in at the time. This poses some privacy concern:...
Reading time: 3 mins š
Likes: 54 ā¤
5 Likes
nukeador
(RubĆ©n MartĆn)
August 18, 2022, 10:49am
3
It seems that a setting to switch this off will be available in the next Discourse version (2.9)
1 Like
nukeador
(RubĆ©n MartĆn)
September 30, 2022, 11:59am
4
This is already implemented in the beta version
New features in 2.9.0.beta10 Sidebar and new notification menu Security Updates This beta includes 4 security fixes for issues reported by our community and HackerOne. Handle incomplete quote bbcode (CVE-2022-39232) Limit user profile field...
Reading time: 5 mins š
Likes: 23 ā¤
Once 2.9 moves to stable we will be able to remove it.
Tordanik
(Tobias Knerr)
March 26, 2023, 12:07pm
5
Weāve since rolled out the Discourse version which introduced the ability to disable this behavior at a site level. Seeing how this appears to be the consensus solution, Iāve now disabled the āallow username in share linksā setting in the admin panel. The username will therefore no longer be included in the URLs generated by the āshareā button.
5 Likes