<![CDATA[Bug in the nodebb-plugin-link-preview plugin]]>When I am in a chat between users, and send a link to a forum page.
The link does not display the page but automatically redirects to login.
All users who received the link have access to the category, but the category is hidden and not accessible to all forum users.
I hope I understood.

]]>https://citiverse.it/topic/6252b6c7-3884-46cf-80e9-d3824ede3473/bug-in-the-nodebb-plugin-link-preview-pluginRSS for NodeWed, 08 Jul 2026 12:31:21 GMTTue, 16 Jun 2026 11:55:56 GMT60<![CDATA[Reply to Bug in the nodebb-plugin-link-preview plugin on Fri, 19 Jun 2026 14:21:31 GMT]]>@Moshe no that's not what I mean.

If the plugin cached private, sensitive data, that is an information disclosure vulnerability.

The plugin acting as a guest and not a logged in user is a feature, not a bug.

]]>https://citiverse.it/post/https://community.nodebb.org/post/107375https://citiverse.it/post/https://community.nodebb.org/post/107375Fri, 19 Jun 2026 14:21:31 GMT<![CDATA[Reply to Bug in the nodebb-plugin-link-preview plugin on Fri, 19 Jun 2026 07:58:48 GMT]]>@julian Perhaps it is possible to configure that after clicking the link and reaching the login/profile page, the plugin will automatically recognize the connection and redirect to the correct page.

]]>https://citiverse.it/post/https://community.nodebb.org/post/107372https://citiverse.it/post/https://community.nodebb.org/post/107372Fri, 19 Jun 2026 07:58:48 GMT<![CDATA[Reply to Bug in the nodebb-plugin-link-preview plugin on Fri, 19 Jun 2026 07:57:12 GMT]]>@baris Indeed, it seems that way, but it must go through identifying the capabilities of that user.

]]>https://citiverse.it/post/https://community.nodebb.org/post/107371https://citiverse.it/post/https://community.nodebb.org/post/107371Fri, 19 Jun 2026 07:57:12 GMT<![CDATA[Reply to Bug in the nodebb-plugin-link-preview plugin on Thu, 18 Jun 2026 18:50:07 GMT]]>@baris I think that's best case.

Link preview accesses as guest and caches it so we wouldn't want to leak any info out accidentally.

]]>https://citiverse.it/post/https://community.nodebb.org/post/107369https://citiverse.it/post/https://community.nodebb.org/post/107369Thu, 18 Jun 2026 18:50:07 GMT<![CDATA[Reply to Bug in the nodebb-plugin-link-preview plugin on Thu, 18 Jun 2026 18:48:54 GMT]]>The link plugin is likely trying to load the category link as a non logged in user and simce it's private it doesn't render. @julian

]]>https://citiverse.it/post/https://community.nodebb.org/post/107368https://citiverse.it/post/https://community.nodebb.org/post/107368Thu, 18 Jun 2026 18:48:54 GMT