The first time it happened, I thought I was crazy and chalked it up to a glitch (i.e. “maybe it’s just showing some weird database ID for me as a user or similar”). But this time, it was pretty clearly another user’s account. The username was SLVRDRGN or something similar, had a completely different profile picture, etc…but when I went to click on the profile section to see if I had access to the account, the browser refreshed and populated with my account info.

Seems a little concerning potentially, so just thought someone should know. I will try to be faster with a screenshot if it happens again.

  • @[email protected]
    link
    fedilink
    41 day ago

    Hmm… I don’t know what would be causing this particular issue on the Cloudflare side, but the fact that lemmy.world shows @[email protected] instead of usernames when viewed with JS disabled suggests that you should review your Cloudflare configuration… At a minimum you have their email filter enabled when it shouldn’t be; there could be other issues too.

    • @MrKaplanMA
      link
      English
      122 hours ago

      why shouldn’t the email filter be enabled?

      I have to admit that it doesn’t do much for us, as the support emails we have in sidebars and posts are unfortunately federated to other instances where they’re not getting obfuscated and will be crawled there, but we do have contact emails on the website. I’m currently not aware of any issues caused by that.

      • @[email protected]
        link
        fedilink
        220 hours ago

        It breaks readability of your site without JS. That’s particularly bad for the “old” (mlmym) UI which would otherwise be usable for basic interaction without JS entirely, but I find it annoying every time I end up loading a page from lemmy.world directly – e.g. to check federation.

        That’s one of the reasons why I’m on reddthat instead of lemmy.world: old.reddthat.com works without JS.