Okay #Hometown admins, if you're still on Hometown 1.0.8 (compatible with Mastodon v3.5.x) you should install this security update:

https://github.com/hometown-fork/hometown/releases/tag/v3.5.17%2Bhometown-1.0.8