]> cat aescling's git repositories - mastodon.git/commit
Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)
authorEugen Rochko <eugen@zeonfederated.com>
Thu, 27 Feb 2020 11:32:54 +0000 (12:32 +0100)
committerGitHub <noreply@github.com>
Thu, 27 Feb 2020 11:32:54 +0000 (12:32 +0100)
commit0c28a505dddd13e2773cd3d5e0beef76a21eb415
treeefbe459449b07cadedf57e3f344d617ed7a98b39
parent7face973fa1c7d6c18b06d427ea0b7a741d11466
Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)
app/controllers/api/v1/statuses/bookmarks_controller.rb
app/controllers/api/v1/statuses/favourited_by_accounts_controller.rb
app/controllers/api/v1/statuses/favourites_controller.rb
app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb
app/controllers/api/v1/statuses/reblogs_controller.rb
spec/controllers/api/v1/statuses/bookmarks_controller_spec.rb
spec/controllers/api/v1/statuses/favourites_controller_spec.rb
spec/controllers/api/v1/statuses/reblogs_controller_spec.rb