# 用户可以在原始 URL 中查看隐藏的标记内容

**URL:** https://meta.discourse.org/t/users-can-see-hidden-flagged-content-in-the-raw-url/350051
**Category:** Feature
**Created:** [2025 年2 月 1 日 18:08 UTC](https://meta.discourse.org/t/users-can-see-hidden-flagged-content-in-the-raw-url/350051 "2025-02-01T18:08:48Z")
**Posts on this page:** 1
**Showing post:** 23

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [2026 年3 月 24 日 21:49 UTC](https://meta.discourse.org/t/users-can-see-hidden-flagged-content-in-the-raw-url/350051/23 "2026-03-24T21:49:06Z")

</div>

我认为这在以下链接中已更改：

> <https://github.com/discourse/discourse/pull/38237>
>
> The \`/raw/:topic\_id\` endpoint was exposing hidden posts to users who shouldn't s…ee them, while \`/raw/:topic\_id/:post\_number\` correctly filtered them via \`guardian.can\_see?\`.
> 
> This inconsistency meant anonymous users and regular users could see hidden post content when fetching a whole topic as markdown.
> 
> Also refactors \`markdown\_num\` into smaller private methods for clarity.

---

_[View the full topic](https://meta.discourse.org/t/users-can-see-hidden-flagged-content-in-the-raw-url/350051)._