edshot99/eBooru
1
0
Fork 0
forked from e621ng/e621ng
Code Issues 11 Releases 1 Activity

Prevent viewing deleted or banned posts

Browse Source 
This fixes an exploit where you can view deleted and banned posts
through the atom service regardless of user level.
This commit is contained in:
Kira 2019-02-13 19:58:38 -08:00
parent cf5e8365f7
commit 2ec0fed659
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
config/danbooru_default_config.rb
View File

@ -462,7 +462,8 @@ module Danbooru
end
def can_user_see_post?(user, post)
if is_user_restricted?(user) && is_post_restricted?(post)
return false if (post.is_deleted? || post.is_banned?) && !user.is_moderator?
if is_user_restricted?(user) && is_post_restricted?(post)
false
else
true