00:32 <+bridge_> <totar> it's only a few lines of code but there's no way to do it already
00:41 <+bridge_> <totar> do you have an attack that works if I enforce ``starts_with("https://")``?
00:42 <+bridge_> <totar> from what I've seen that should be all you need
03:53 <+bridge_> <gorp_tw> unfortunately it can be pretty bad if you use a whisper-based auth system :justatest:
03:54 <+bridge_> <gorp_tw> but yeah, it seems like the general use case of uh, not leaking your private conversations, especially without consent of the other party, is probably a concern for a FOSS project
03:54 <+bridge_> <gorp_tw> or at least, seems in our wheelhouse to care about
03:55 <+bridge_> <gorp_tw> there will be some cases where whispers are needed (especially for moderation purposes) but it could be a non-default option with a clear checkbox, like we currently have for chat
05:08 <+bridge_> <12944qwerty> i had a few ideas including disabling chat for demos that I wanted to work on
05:08 <+bridge_> <12944qwerty> also including a pruner to manage storage
08:34 <+bridge_> <manikoo> :kek: :DwayneEyebrow: