Moderation Support

[kevincox]

Right now webmentions are visible in the API until deleted. This means that if you automatically display mentions on your website any new mention will be displayed. This obviously opens the door to spam.

If you are diligent you can delete the spam, however this still leaves a window where it is visible on your site.

There should be an option such that received webmentions are hidden by default, or alternatively an approved: false field can be added to the returned API response. Then manual review will make the mention visible or flip the approved field.

Obviously auto-approval could be the next step, such as trusted domains or automated spam score thresholds. However this first step is very useful on its own.