Source data available to non-logged in users

My forum is configured to only permit invited, logged-in users. It does not offer any registration links or other info, just a white page with a login button. It was recently pointed out to me that a great deal of information about the forum – at least to the extent that we’re talking about Discourse page code – is available to anyone who looks at the login page source and follows the various (many) links available, all of which present masses of other page code to any non-logged in user. All sorts of goodies in there. Yes, presumably it’s virtually all internal boilerplate, but I can’t help but wonder if somewhere in there various forum-content specific data isn’t embedded as well. Has this possibility ever been addressed? Thanks.

Can you share one example of a goodie?

2 Likes