[openstreetmap/openstreetmap-website] gravatar / user image should only be available to authenticated users (#1631)

[Simon Poole]

Probably needs a bit of discussion, but currently gravatar or user image links are available to non-logged in users both via the API and the UI.

I would suggest that this should not be the case, but maybe somebody disagrees? Naturally an OSM account is only a small hurdle for any villain.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1631
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170904/f747198d/attachment.html>