Tom Purdue (tompurdue) wrote in lj_dev,
Tom Purdue
tompurdue
lj_dev

XML API and security

To get a user's friends list you must log in with that user's password. However, that restriction isn't completely general: I can get the same information much of the time on a user's info page.

Obviously there are good reasons to allow a user to hide their friends, but if they're permitting it, why not make it available through the API?
Subscribe

  • subversion

    We're now using Subversion instead of CVS. Everything's been imported into: http://code.sixapart.com/svn/livejournal/trunk/…

  • cvs going down

    FYI: LiveJournal/Danga cvs will be up and down a lot over the next 24-48 hours, and changing IPs as well. A move to subversion is looking…

  • Public CVS Fixed

    Just a quick update: CVS is once again available to the public via the cvs pserver interface. It was down due to a security alert and took a while to…

  • Post a new comment

    Error

    Anonymous comments are disabled in this journal

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

    Help
  • 3 comments