You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, command replies (/ingame, /apitoken, etc.) are sent in the channel where the command is used, for anyone else to see. This often accidentally reveals private information (tokens, groups, etc.) of the command user. Example:
One solution is to send all replies to the user's DMs.
Alternatively, the reply message should have the ephemeral flag, so only the command user can see it, and it disappears when the Discord app is restarted. Example:
Another option, for commands where it is desired to show the reply to others in the channel, would be to first reply with a button interaction "Do you want to show the reply in the channel here? [show in channel] [show in DMs]", and only send the actual reply to the channel or DMs accordingly.
The text was updated successfully, but these errors were encountered:
I just want to throw out a consideration here, which is that Snitchvis uses the output of !kira relayconfig to parse snitch messages correctly (code). If !kira relayconfig was dm'd instead, this would be considerably less user-friendly to set on snitchvis1. Hopefully there will remain a way to send this information publicly.
Footnotes
Not that it's very friendly right now, mind you, but running !kira relayconfig followed by .add-kira-config is bearable enough. ↩
Yes, only potentially sensitive commands should go to DMs. Another example that should stay in the channel where it's used is /whoami, the response of which some bots read to easily link people's in-game and Discord accounts.
Currently, command replies (/ingame, /apitoken, etc.) are sent in the channel where the command is used, for anyone else to see. This often accidentally reveals private information (tokens, groups, etc.) of the command user. Example:
One solution is to send all replies to the user's DMs.
Alternatively, the reply message should have the
ephemeral
flag, so only the command user can see it, and it disappears when the Discord app is restarted. Example:Another option, for commands where it is desired to show the reply to others in the channel, would be to first reply with a button interaction "Do you want to show the reply in the channel here? [show in channel] [show in DMs]", and only send the actual reply to the channel or DMs accordingly.
The text was updated successfully, but these errors were encountered: