Leaking private feeds


#1

It looks like you are leaking private Facebook activity feeds. (at least one: 1936031). Perhaps you can ask if a feed is private if there is a query string?


Private feeds are public for everyone to see
#2

Thanks, I’ll add that to the list of tokens that are prevented from being shown in autocomplete.