Mastodon API: Respect post privacy in favourited/reblogged endpoints

This commit is contained in:
rinpatch 2019-09-14 01:50:15 +03:00
commit 056780fd8e
3 changed files with 56 additions and 2 deletions

View file

@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
### Security
- OStatus: eliminate the possibility of a protocol downgrade attack.
- OStatus: prevent following locked accounts, bypassing the approval process.
- Mastodon API: respect post privacy in `/api/v1/statuses/:id/{favourited,reblogged}_by`
### Removed
- **Breaking:** GNU Social API with Qvitter extensions support