diff options
| author | rinpatch <rinpatch@sdf.org> | 2019-05-31 15:25:17 +0300 |
|---|---|---|
| committer | rinpatch <rinpatch@sdf.org> | 2019-05-31 15:25:17 +0300 |
| commit | d9c0650ff9afd66c15d960b727dc2e6ed37477a3 (patch) | |
| tree | 06a39da5c79cf25a32df34db84b8f11b0692faeb /docs/api | |
| parent | a9eaa558853460b811d134b49fb00b017b772e94 (diff) | |
| download | pleroma-d9c0650ff9afd66c15d960b727dc2e6ed37477a3.tar.gz | |
Mastodon API: Fix lists leaking private posts
Our previous list visibility resolver grabbed posts if either follower
collection of the user in a list who is followed is in `to` or if
follower collection of the user in a list was in `cc`. This not only
missed unlisted posts but also lead to leaking private posts when
`fix_explicit_addressing` mistakingly started putting follower collections
to `cc` (also fixed in this MR).
Reported by @kurisu@iscute.moe via a DM
Diffstat (limited to 'docs/api')
0 files changed, 0 insertions, 0 deletions