Provide fully qualified room and user name for 'Invited' view to allow spam reporting, and prevent impersonating/phishing, and add 'Decline and Block' button
Currently Fractal does not provide fully qualified names of users and rooms in the Invited view. This makes it impossible to report spam invites as it's unknown what homeserver the user is originating from. Nor is it possible to report to the room's homeserver admin without the room homeserver info. It also makes it easy to impersonate and phish users as the UI would present the person doing the inviting and the person they're impersonating as the same. For example, "@ kcommaille @ gnome.org" and "@ kcommaille @ fakeserver.org" if using the same picture would appear the same. The same impersonating and phishing risks apply to the current design of just providing a room name and picture.
Lastly, there's no way to block a user invite spamming from the Invited view. Therefore a 'Decline and Block' button is also recommended.
Proposed Mockups:
Design Tasks
-
Design tweak mockup that still meets GNOME Human Interface Guidelines
Development Tasks
-
Add button with logic that adds user to Ignore list and sends Decline event -
Change display and logic code to reflect Design made
QA Tasks
-
Confirm 'Decline and Block' adds user to Ignore list