Users can see hidden profiles if there's a post of the hidden user live

[GabIsAwesome]

If there's a post of the hidden user live, anyone can click on their profile and see it. Refreshing the page do cause the profile to disappear and show a 404 not found page.

[clarkwinkelmann]

Thanks for the report! Unfortunately this is the expected behavior for "Hide shadow banned users profiles" as described in the README.

The only way to solve this would be to simulate those posts as being made by a deleted user, but I'm not sure that's a very good idea as it could make discussions even harder to read for normal users who will no longer know who posted what.

Preventing access to the profile while preserving public authorship would lead to other issues because then the UX would need to be changed to make it clear that profile is not clickable, and technically all of the user profile would still be exposed in the REST API and the profile card so that wouldn't change anything from a privacy standpoint.

I don't want to add too many options in this extension so I'm not sure if I want to implement the solution I described.