moderation

Ready for a smoother ride on the Fediverse? ActivityPub for WordPress 7.3.0 is here to make your experience friendlier and more flexible than ever. Whether you’re keeping out unwanted guests, bringing stray conversations home, or just tidying up your digital footprint, this release puts powerful new tools right at your fingertips. Let’s take a look at what’s new!

Personalized & Site-Wide Moderation

With this release, Moderation tools are easier to discover and manage, thanks to a revamped two-tiered system that empowers both site admins and individual users with greater control over their Fediverse experience.

Now, site administrators can set up site-wide blocks—covering domains, keywords, and even specific actors—right from the Settings screen or the new Blocked Actors table. These tools work together to keep out unwanted content and spammy actors for everyone on your site.

But we didn’t stop there! Every user can fine-tune their own experience. Head to your Profile to add personal domain and keyword blocks, or visit the new Blocked Actors submenu under Users to manage who can interact with you. Blocking someone is easier than ever—just paste their profile ID or webfinger, or use the handy new “Block” link right from your Followers list.

Followers List With Block Option
Block Account Confirmation
Followers After Blocking

Whenever new ActivityPub content comes in, the plugin checks it against both global and personal blocks. Domains are matched not just to the sender, but also to the activity and object IDs. Keywords are scanned throughout the content, summaries, and even actor names. Site-wide rules always run first, followed by your personal settings—so you’re protected at every level. (For the blog actor, only site-wide blocks apply.)

For backwards compatibility, the classic comment disallow list is still supported, ensuring your existing moderation rules continue to work seamlessly.

Saying Goodbye, the Right Way

Sometimes, a clean break is necessary. Whether you’re retiring a blog, removing a user, or handling old content, this release makes sure your presence in the Fediverse can be removed gracefully and consistently.

We’ve added a self-destruct feature for sites that want to step away entirely. With a single CLI command (wp activitypub self_destruct), WordPress will send out Delete activities to all followers. Built-in progress tracking and admin notifications let you know when the process has finished, so you can be sure your Fediverse footprint is fully cleared.

User deletion is now handled with the same care. When a user is removed from WordPress, a corresponding Delete activity is sent to their followers, ensuring that connections across the network are properly closed.

Bring the Conversation to You

Sometimes a reply you care about doesn’t make it all the way to your Inbox. Maybe it was posted on a remote server with finicky delivery, or slipped past the usual flow of ActivityPub. With this release, you don’t have to miss out.

Now you can search for any remote URL directly. If the comment is already in your database, you’ll be taken straight to the matching comment thread on your blog post. If not, the plugin will fetch and import the remote reply to that post, so you can fold scattered conversations back into your site seamlessly.

This means you’re no longer limited to what arrives automatically. If you’ve got a link to a discussion happening elsewhere in the Fediverse, you can pull it right into your own comment threads and keep the context intact.

A Persistent Inbox for Better Debugging

Fediverse interactions can get complex, and sometimes you need deeper insight into what’s really happening under the hood. That’s where the new persistent inbox comes in.

When enabled in Advanced Settings, the plugin now logs all incoming Create or Update activities. Instead of vanishing once processed, these entries are collected in a dedicated Inbox Collection—giving you a complete trail to reference when debugging.

Full Changelog

Added

Add actor blocking functionality with list table interface for managing blocked users and site-wide blocks.
Add code coverage reporting to GitHub Actions PHPUnit workflow with dedicated coverage job using Xdebug.
Add comprehensive blocking and moderation system for ActivityPub with user-specific and site-wide controls for actors, domains, and keywords.
Add comprehensive unit tests for Followers and Following table classes with proper ActivityPub icon object handling.
Added link and explanation for the existing Starter Kit importer on the help tab of the Following pages.
Adds a self-destruct feature to remove a blog from the Fediverse by sending Delete activities to followers.
Adds a User Interface to select accounts during Starter Kit import.
Adds support for importing Starter Kits from a link (URL).
Adds support for searching (remote) URLs similar to Mastodon, redirecting to existing replies or importing them if missing.
Adds support for sending Delete activities when a user is removed.
Adds support for Starter Kit collections in the ActivityPub API.
A global Inbox handler and persistence layer to log incoming Create and Update requests for debugging and verifying Activity handling.
Follower lists now include the option to block individual accounts.
Improved handling of deleted content with a new unified system for better tracking and compatibility.
Moderation now checks blocked keywords across all language variants of the content, summary and name fields.
When activated or deactivated network-wide, the plugin now refreshes rewrite rules across all sites.

Changed

Add default avatars for actors without icons in admin tables.
Added support for list of Actor IDs in Starter Kits.
Improve Following class documentation and optimize count methods for better performance.
Refactor actor blocking with unified API for better maintainability.

Fixed

Blocks relying on user selectors no longer error due to a race condition when fetching users.
Fix duplicate HTML IDs and missing form labels in modal blocks.
Fix malformed ActivityPub handles for users with email-based logins (e.g., from Site Kit Google authentication).
Fix PHP 8.4 deprecation warnings by preventing null values from being passed to WordPress core functions.
Improves handling of author URLs by converting them to a proper format.
Improves REST responses by skipping invalid actors in Followers and Following controllers.
More reliable Actor checks during the follow process.
Prevents Application users from being followed.
Proper implementation of FEP 844e.
Switches ActivityPub summaries to plain text for better compatibility.

Downloads

WordPress.org: activitypub.7.3.0.zip
GitHub: tag/7.3.0

Thank you!

Big thanks to everyone who contributed code, shared feedback, tested, or encouraged us along the way! Together, we’re making the fediverse more connected—one release at a time. ❤️

We’ve just rolled out version 7.3.0—try it out and let us know what you think!

ALT

The domain freaky.university has been suspended (defederated) from Enby.Life for pedophilia (MAPs) and zoophilia. The admin Felix is also admin of cutiepaws.org, another known MAP instance. As usual for pedi instances, this one runs Pawkey (pediverse fork of Sharkey).

As Pawkey's frontend is locked down by default, you will need to view the user through another federated instance to verify receipts. (though I don't recommend that, personally...)

#FediBlock #BlockRecommendation #DomainBlock #DomainBlocks #Moderation

ALT

The domain libertarian.communitynetwork.space has been suspended (defederated) from Enby.Life. This is currently a single-user instance, but seems prepared to accept new users and become a new shitty hub for the right-wing side of fedi.

Block reasons include:
- right-wing
- pro-russia
- claims license to all content
- transphobia
- sex-negative
- ableism
- supports police violence
- racism (white supremacy, "white genocide" misinfo)
- promotes capitalism
- xenophobia
- publicizing reports
- supports child starvation and death
- fatphobia
- fascism
- supports mass surveillance
- supports discrimination as a concept

No screenshots this time, since you can just hop to the instance homepage and local timeline to see all of this right out in the open.

#FediBlock #BlockRecommendation #DomainBlocks #DomainBlock #Moderation

The domain feral.bond has been suspended (defederated) from Enby.Life for pedophilia (pro-contact MAPs) and zoophilia. At least one user has an alt on another pediverse instance, cunny.beauty.

The instance frontend is locked down, so you'll need to view a user through another federated instance to verify receipts.

#FediBlock #BlockRecommendation #DomainBlock #DomainBlocks #Moderation

ALT

ALT

ALT

The domain doll.salon has been suspended (defederated) from Enby.Life for pedophilia (MAPs and lolicon/shotacon).

As usual for pedi instances, this one runs Pawkey (pediverse fork of Sharkey). Pawkey's frontend is locked down by default, so you'll need to view the users through another federated instance to verify receipts. (though I don't recommend that, personally.)

Sorry for the lack of alt text, I'm just getting tired of looking at these awful profiles. 3rd screenshot contains a lolicon banner depicting violent assault of a child, please be careful and don't look unless you need to. I censored it but it's still extremely awful.

#FediBlock #BlockRecommendation #DomainBlock #DomainBlocks #Moderation #Pedophilia