@email@example.com I'll look into the patch and may roll it into the #debian package.
That package should be more resistant to that sort of attack as the permissions are different. Using something like #apparmor helps here too.
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!