you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 1 year ago (2 children)

Sounds like such unscoped requests should not be allowed in the first place? Maybe worth reporting in a Lemmy issue?

  • source
  • hideshow 2 child comments
  • [+] [S] 3 points 1 year ago (1 child)
  • [–] 5 points 1 year ago*

    It's only useful with the ModeratorView type. I haven't heard more than just a few using it for anything other than for moderation purposes. It is useful for some type of bots, for example. But I think they should opt in for a solution with the upcoming plugin system (for example a webhook) or with mentions. Polling this endpoint is not very efficient and it is very possible to even miss some comments.

    So I think this endpoint should be just for the modview type and authorization should therefore be required.

    Or the rate limit should be more fine tunable. There are like only 4 configurable rate limits that encompass all endpoints.

  • source
  • parent