[bug] External Users can still see followings/followers of a follow-hiddened account

[CDN18]

[bug] External Users can still see followings/followers of a follow-hiddened account

[tsmethurst]

Could you give some more details so I can check what's happening here? How many followers/following does the gts account have, and how many are being shown on the remote instance?

For context: There's nothing we can do to stop external instances showing followers/following on their instance that they know about (which should not be a complete list). Or, if the external instance loaded the whole list by iterating through followers/following before the gts account set hide collections, there's not much we can do about that either. Though I'm not aware of any fedi server that iterates through followers/following in that way.

[CDN18]

Sure :) I'm meaning that external users can retrieve the entire following/follower list in realtime even after the hide option are enabled, not just following/followers on their instance, which seems not so normal.

The hiddened gts account has about 60 followers and more than 300 followings, with the discovery option enabled and manually approve option disabled.

[CDN18]

Update: After additional testing, I've determined that the issue likely stems from a caching problem in the client I'm using. The complete list is accessible when any account is logged in, but disappears the moment I log out of my hidden GTS account. I was mistaken in my initial assessment. Apologies for the inconvenience🙏

[tsmethurst]

Aha no problem, I'm glad there's no issue :)