Hidden channels being exposed by BetterDiscord

Comments

1 comment

  • donovan_dmc

    Solution: don't store private info in channel names and or topics

     

    Those properties aren't private, and you shouldn't expect them to be

    Bots need to know all of the existing channels for input and such, not really sure why they would need channel topics but nonetheless, you shouldn't try to hide sensitive info in either

     

    This is like trying to hide passwords in roles, normal users can't see them, but bots & people doing either api requests, or using client mods can. Should we also hide roles from all end users?

    0

Please sign in to leave a comment.