Jan Wildeboer 😷:krulorange: on Nostr: From the referenced commit [1] I deduct that there was a way to construct a list of ...

From the referenced commit [1] I deduct that there was a way to construct a list of statuses that would be sent back to the requester without proper checking of scope, meaning that you could get messages that were limited to certain users without being one of those certain users. Oops.

[1] https://github.com/mastodon/mastodon/commit/d4bf22b632ea8b1174375c4966a6768ab66393b6