Post 9oSfRlmBff8v5m8z2m by InspectorCaracal@tootplanet.space
 (DIR) More posts by InspectorCaracal@tootplanet.space
 (DIR) Post #9oSfRlmBff8v5m8z2m by InspectorCaracal@tootplanet.space
       2019-10-30T16:44:59Z
       
       0 likes, 1 repeats
       
       hey all #mastoadminfriendly reminder that all versions of mastodon before 3.0 allow ANYONE to pull ANY of the public timelines via an API callmastodon 3.0 and up ALSO allows anyone to do this if you have the timeline preview turned onthis is important because it means that instances you have blocked can still access all of your site's public postsmaking the API require authentication for all public timeline requests is an easy code patch:https://github.com/InspectorCaracal/homeworld/commit/3fc1b4e5c00bcb516c58b0e32003b565dada174d