Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

'Copy post text' and 'Translate' reveal text of posts from !no-unauthenticated accounts in PWI #3567

Closed
surfdude29 opened this issue Apr 16, 2024 · 0 comments · Fixed by #3573
Labels
bug Something isn't working

Comments

@surfdude29
Copy link
Contributor

Describe the bug

The text of a post from a user who has set the !no-unauthenticated label on their account is still easily available via the public web interface by selecting 'Copy post text' or 'Translate' from the drop-down menu.

To Reproduce

Steps to reproduce the behavior:

  1. In an incognito browser window or with a fresh install of the app, open a link to a post from an account that has the !no-unauthenticated label set, e.g.: https://bsky.app/profile/evilgalprods.bsky.social/post/3kq76td6lxb22
  2. Select 'Copy post text' from the drop-down menu and paste the text somewhere, noting that you can view the text content of the post this way.
  3. Alternatively, select 'Translate' from the drop-down menu and note that the text content of the post is visible on the Google Translate webpage that is opened.

Expected behavior

The text of posts from accounts that have the !no-unauthenticated label set should not be easily available via the PWI.

Given that there is already a Share button, perhaps the post drop-down menu should not be shown at all in the PWI for posts from accounts that have the !no-unauthenticated label set?

Details

  • Platform: desktop and iOS (haven't tested Android, although I assume it's the same)
  • App version: 1.77
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
1 participant