This is a pretty impactful bug we’ve run into during our beta test, I’ve seen topics about this but they all seem >3 years old, so unsure if this is currently on the radar.
When a chat message containing an uploaded image is flagged for review, the review queue page doesn’t show the image so mods can’t see what was actually reported. This occurs in both DMs and in images posted in chat channels. For DM messages, the auto-generated transcript makes this more confusing as it shows the previous messages (including images!) but the flagged message itself is excluded.
Steps to reproduce:
- User A sends a message that includes an image (text optional, we ran tests with both and results were the same)
- User B flags that message (i.e. Spam)
- View the flagged message in the
/reviewqueue
It will not show the image for DM or chat channels, but the DM version is more obvious since it’s also missing from the transcript.
Looking at the code in core, this seems to be because the flag handler in /chat/review_queue.rb only gets a snapshot of the cooked message, and the cooked message never contains its uploads.
It’s less of a problem in a channel message since presumably the moderation team can go back and find the message to view, but since mods have no access to chat DMs without impersonating the user, not being able to see image spam or reported NSFW content is a big problem, considering what a bad actor could possibly send.
Happy to provide screenshots of our test if useful!