glitcX wrote:

If they do this then there has to be an official banner feature.

But those are unrelated features.

The featured project doesn’t have to be a banner, it could be a game with a bad thumbnail.

An unshared, featured project isn’t immediately a banner.

SpyCoderX wrote:

glitcX wrote:

If they do this then there has to be an official banner feature.

But those are unrelated features.

The featured project doesn’t have to be a banner, it could be a game with a bad thumbnail.

An unshared, featured project isn’t immediately a banner.

This is true.
why does no one care about my new suggestion :skul:

Adding on to my previous post…

Super_Scratch_Bros20 wrote:

This has led me to conclude that a button as a new option in “Report this profile”, with an option to report a featured project, would be efficient.

You know what's more efficient than reporting unshared featured projects? Not being able to feature those projects in the first place.

Also, I think this post is particularly relevant:

Za-Chary wrote:

(#3)

subjectnamehere wrote:

why not just add a report button on the user's page? that seems much more convenient and won't remove banners

One reason is that having an unshared featured project is not an intentional feature, so it shouldn't be possible in the first place.

This is, in my opinion, a serious oversight on the Scratch Team's part.
Unshared projects shouldn't be visible to anyone but their owners, because not only are they unreportable, they're meant to be private!

This bug has existed since, at the latest, October 2012 - basically the dawn of the Scratch 2.0 website.

I think TurboWarp's documentation puts it best…

TurboWarp Documentation wrote:

Securing unshared projects is a decade overdue.

[…]

In most other large websites, “unshared” or “private” things being effectively public would be considered a critical security bug and usually be eligible for a large bug bounty. For example, YouTube paid a security researcher $5000 for reporting a bug that allowed them to view low-resolution images from any private video.

bring up my Super_Scratch_Bros20's post

Support. I’ve actually seen this trick used with featured projects that contain swearwords, which is 1000% not ok.