You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Right now webmentions are visible in the API until deleted. This means that if you automatically display mentions on your website any new mention will be displayed. This obviously opens the door to spam.
If you are diligent you can delete the spam, however this still leaves a window where it is visible on your site.
There should be an option such that received webmentions are hidden by default, or alternatively an approved: false field can be added to the returned API response. Then manual review will make the mention visible or flip the approved field.
Obviously auto-approval could be the next step, such as trusted domains or automated spam score thresholds. However this first step is very useful on its own.
The text was updated successfully, but these errors were encountered:
Right now webmentions are visible in the API until deleted. This means that if you automatically display mentions on your website any new mention will be displayed. This obviously opens the door to spam.
If you are diligent you can delete the spam, however this still leaves a window where it is visible on your site.
There should be an option such that received webmentions are hidden by default, or alternatively an
approved: false
field can be added to the returned API response. Then manual review will make the mention visible or flip theapproved
field.Obviously auto-approval could be the next step, such as trusted domains or automated spam score thresholds. However this first step is very useful on its own.
The text was updated successfully, but these errors were encountered: