warmweer wrote: ↑
Mon May 18, 2020 8:01 pm
As a defaultsystem: absolutely not (reason: too many non-sensical topic titles.
That one just made me chuckle. "Showing the post subject might possibly appear nonsensical, therefore we should continue showing links that are indistinguishable from π to ten decimal places instead..."
At least when showing the post subject, the opportunity
to make sense exists. As opposed to now, where "it will never make sense."
Information disclosure is definitely a necessary consideration though. I could sit in post Preview mode and "probe" for forums and message subjects I don't have access to actually see.
Maybe we split the difference and consider the alternative of making it easy for the post author
to insert a link to an existing post that uses a descriptive title instead of just the raw link. You know, like Microsoft's Clippy™
popping up when you're attempting to include a link and saying "I see you're trying to link to an existing post on this board...."
I'm kidding. I mean anything as simple as just making a new BBCode like
to wrap the link in instead of
, when the post author's intention is to automatically pull the post title in addition to linking to the post. Access check will be for whether the post author
has access to the post being linked, since at that point they're at liberty to disclose the post subject in their message, whether the subject text was being automatically pulled or not.
edit: As I continue to think about it, maybe the "access check only for the post author" applies even to Toxyy's original idea, too.
e.g. What if the "replace links to this board with the title of the post" isn't a "when viewtopic.php renders the message" action, like the current URL shortening behavior. And was instead an "at the time of posting" action, when the links will be converted into literal
references instead of just the raw URL.
i.e. No different than if the post author themselves had chosen to do that. And if the post author didn't have access to the post being linked to, simply no replacement will be performed and the raw link will be included as-is.
Subsequent viewers of the posted message have no new access check, since they're simply reading the posted message, same as if the post author had manually typed in the same description.
Similar to the existing "Do not automatically parse URLs" checkbox underneath the post editor, there could be a checkbox for opting-in or opting-out of this behavior if needed.