Uncensored Usernames Showing Up On `username-history` Endpoint

Previous usernames that show up censored on the Roblox website profile page are accessible uncensored through Open Cloud API.

https://users.roblox.com/v1/users/{userId}/username-history

This can expose PII that was previously removed. An example of this happening is in the staff-only section.

Expected behavior

Previous usernames that are available by clicking more on the Roblox website profile page, and that are censored, show up uncensored using the username-history endpoint.

A private message is associated with this bug report

Hiya,

As i saw this post, i’ve remembered an dev (who owns an game and being a group holder of it) in which their Previous username has been censored at some point and being verified.

So, i’ve decided to copy its userid and paste it and it said “oofmybone”. like. did the bone go oof? What it got censored at some point or roblox moderation just being themselves?