You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, the /users endpoint returns a list of all registered users along with their email addresses. This behavior raises privacy and security concerns, as it exposes sensitive user information (i.e., email addresses) to anyone with access to the API. Publishing users’ email addresses in a publicly accessible endpoint can lead to data harvesting, spam targeting, and other privacy issues.
Email addresses should not be shown by default on the users endpoint.
The text was updated successfully, but these errors were encountered:
Currently, the /users endpoint returns a list of all registered users along with their email addresses. This behavior raises privacy and security concerns, as it exposes sensitive user information (i.e., email addresses) to anyone with access to the API. Publishing users’ email addresses in a publicly accessible endpoint can lead to data harvesting, spam targeting, and other privacy issues.
Email addresses should not be shown by default on the users endpoint.
The text was updated successfully, but these errors were encountered: