## commit spoofing
Anyone with direct commit access can forge "web commit from foo" and
-make it appear on [[RecentChanges]] like foo committed. One way to avoid
+make it appear on [[Json.tl.ph]] like foo committed. One way to avoid
this would be to limit web commits to those done by a certain user.
## other stuff to look at