I’ve had this happen on desktop, and now Jerboa. Normally it would just be the wrong username in the top right corner for a second or so. Though, my most recent instance of it occurring had me load someone else’s entire profile overview.

I’m sure that I won’t actually be able to interact with anything as it seems just to be a caching issue like steam had that one time. However, I have concerns this will allow users to see other users private messages or other issues.

Trying to locate an existing issue between lemmy’s 3000 GitHub issues, but haven’t found one yet. Is there one open?

  • webjukebox@mujico.org
    link
    fedilink
    arrow-up
    7
    ·
    1 year ago

    Note that Lemmy doesn’t send any cache-control headers yet, so there is a chance that private data gets cached and served to other users. Test carefully and use at your own risk.

    @dessalines@lemmy.ml pointed it out in the new release announcement.