Discourse-chat-integration 在发布的 discord 项目上显示用户名称

discourse ver: 2.7.0.beta4
discourse-chat-integration ver: latest from git as @ 25/02/21
browser: firefox 85.0.1 (64-bit)
os: ubuntu 20.20 (latest patching)

bit off an interesting one.

we have a few discourse first post only to discord transfers which work a treat although the user’s name gets displayed which seems to be a security oversight.

i can’t find anywhere where this is configurable and have a suspicion it may be an oversight?

Screenshot from 2021-02-25 08-31-00

@Orzo is all it should be displaying

if i’ve had a boy look and there is an article here that i have not managed to find, feel free to point me to it.

tia

hamish

Does the full name appear on the Discourse post on the forum, or just the username? (in other words, is the setting prioritize username in ux enabled on your Discourse site?)

1 个赞

thank @awesomerobot

i went and checked a couple of things, have not gotten to the specific discord element you mention (removed: brainfart)

checked exactly which attribute “James Mitchell” is contained in under Orzo’s discourse profile I have found that the name doesn’t actually appear anywhere in the user’s account.

I checked a few other posts into discord from discourse with similar string @profile and found the same thing.

that setting prioritize username in ux is enabled.

toggled the setting - did not alter behaviour

installed data browser and confirmed that users.name is what is finding its way to discord

interestingly users.name doesn’t appear editable through the discourse UI - am i having a muppet moment here?

您好,

我也遇到了同样的情况——用户的名字没有输入到他们的个人资料中。

有什么想法吗?

谢谢

嗨,这种情况仍然存在,而且似乎是源于电子邮件地址,但仅限于某些用户——会不会是它获取了电子邮件地址,然后以某种方式去掉了标点符号以及 @ 符号之后的所有内容?

这是一个相当令人担忧的数据保护问题。

抱歉再次提起这个话题,但用户们有些担心——我不得不禁用该集成。

谢谢。

1 个赞

该名称来自 Discourse 的“name”字段,该字段在注册期间填充(由用户键入,或从您的登录系统中获取)。根据论坛的配置方式,此值可能在用户界面中隐藏,因此通过聊天集成显示此值肯定会造成混淆。

此更改将进行整理:

1 个赞

该主题在 6 天后自动关闭。不再允许回复。