Fix leak of arbitrary statuses through unfavourite action in REST API (#13161) (bf0942a0) · Commits · QOTO / qoto-groups · GitLab

Skip to content

GitLab

Explore

Sign in
Register

Primary navigation

Project

qoto-groups
- Activity
- Members
- Labels
- Issues
  0
- Issue boards
- Milestones
- Iterations
- Wiki
- Requirements
- Environments
- Terraform modules
- Incidents

Snippets Groups Projects

bf0942a0

Commit bf0942a0 authored 5 years ago by Eugen Rochko

Downloads
- Patches
- Plain Diff

Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)

parent c4118ba7

No related branches found

No related tags found

Loading

Changes 6

Hide whitespace changes

Inline Side-by-side

Showing

app/controllers/api/v1/statuses/favourited_by_accounts_controller.rb 1 addition, 2 deletions

...lers/api/v1/statuses/favourited_by_accounts_controller.rb
app/controllers/api/v1/statuses/favourites_controller.rb 9 additions, 17 deletions

app/controllers/api/v1/statuses/favourites_controller.rb
app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb 1 addition, 2 deletions

...llers/api/v1/statuses/reblogged_by_accounts_controller.rb
app/controllers/api/v1/statuses/reblogs_controller.rb 14 additions, 13 deletions

app/controllers/api/v1/statuses/reblogs_controller.rb
spec/controllers/api/v1/statuses/favourites_controller_spec.rb 59 additions, 27 deletions

...controllers/api/v1/statuses/favourites_controller_spec.rb
spec/controllers/api/v1/statuses/reblogs_controller_spec.rb 59 additions, 27 deletions

spec/controllers/api/v1/statuses/reblogs_controller_spec.rb

with 143 additions and 88 deletions

Loading

0% Loading or .

You are about to add 0 people to the discussion. Proceed with caution.

Finish editing this message first!

Please register or sign in to comment