Just a quick question about ChatFiltering

[Corecii]

Yes.

@ContextLost

If you know the post where that was unclear, we’ll fix it (update: found and fixed).

All user input needs to be filtered before sending it to other clients. Period.

Like @Cindering mentioned, the Chat:CanUsersChatAsync or Chat:Chat:CanUserChatAsync check can be skipped for text that cannot really be used for real-time communication. These are otherwise mandatory (The new filtering APIs in TextService will handle this for you). The text still needs to be filtered.

You are allowed to store unfiltered text in DataStores, and filter it when you load it, before you display it. This is how we recommend dealing with text in DataStores now, since the text filter changes all the time.

(Members-only Link)

@ContextLost

You don’t need to filter the string if it is only displayed to the user who entered it and it is not stored between sessions. If it is saved or persists in any way after the player leaves you will need to filter it.

(Members-only Link)

@JParty

Note: You will most likely not see your own input text filtered locally. This can be very confusing, so I want to mention this system explicitly. However, ANY text input by a user that can be accessed in any other session or is ever viewed by another user will need to be filtered.

(Link)

@0xBAADF00D

You should still filter even if it’s only going to your admins. This is because players could potentially send personally-identifiable information. You don’t really want to risk having people able to send you their phone number or house address, even if it seems like it doesn’t matter.

(Link)

---

If you are a full member, you can find all of these posts by searching group:roblox_staff filter. I have all of these bookmarked, and I found one or two through that search to make sure I had everything relevant. I’ve quoted some of these into public sections before too, so the information is available even if you’re not a full member if you use the right search terms in the right places.