djsundog/tootlab-mastodon
1
0
Fork 0
mirror of https://github.com/glitch-soc/mastodon.git synced 2024-11-23 16:44:04 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix potential private status leak (#10969)

Browse Source
This commit is contained in:
ThibG 2019-06-05 13:40:20 +02:00 committed by Eugen Rochko
parent d34a3a2cc7
commit 7fa23ec697
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/statuses_controller.rb
View File

@ -27,7 +27,7 @@ class StatusesController < ApplicationController
def show
respond_to do |format|
format.html do
unless user_signed_in?
if current_account.nil?
skip_session!
expires_in 10.seconds, public: true
end