Comment on Slrpnk instance is down till mid July; they might relaunch their server on piefed.

• tfm@europe.pub ⁨3⁩ ⁨weeks⁩ ago

  It’s not just native Apps. Alternative web UIs like Thunder, Photon and Voyager need them too.

  source

  • GreenKnight23@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    yes, but those frontends are typically tied closer to the backend than a public API.

    things like CSRF can help block abuse of the back end.

    source

    • tfm@europe.pub ⁨3⁩ ⁨weeks⁩ ago

      Nope they all use the public API. Even the default Lemmy web client.

      source

      • GreenKnight23@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

        well that’s poor planning and why bots are such a problem.

        I know CSRF tokens aren’t a silver bullet, but doing nothing to stop them does nothing to stop them.

        source

        • -> View More Comments