webeindustry Correct. Not exactly a security problem with Flarum but rather with allowing random internet services to exist.
If someone wanted to solve this, they could probably write an extension to ban the list of links grabify uses. But it would likely need constant updating to stay ahead of their list. The other thing to do could be to have a proxy visit the link, grab the right one, and replace the posted link with that, removing the grabify service and only sending the server's IP in its stead.
But any other service that does this same thing could be used instead. Or a homebrew service you host yourself.
