Text entered in avatar attachment and avatar fields appears in logs


#1

Any text entered in the avatar attachment and avatar appearance fields appear in the logs of everyone else in the domain. Each keystroke is sent in the logs, meaning that if I were to type my domain “http://mold.bz”, the user would receive log files with “h”, “ht”, “htt”, “http”, etc. This can cause performance issues for everyone in the domain.

Also, it tries to resolve every iteration before the URL is finished. It retries up to 7 times. For reasons I can elaborate on further in a less public channel, this becomes a serious issue.