hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

CommonAPI: Prevent users from accessing media of other users

Browse source 
commit 1afde067b1 upstream.
This commit is contained in:
Mint 2023-09-02 01:43:25 +03:00 • committed by Haelwenn (lanodan) Monnier
commit 535a5ecad0
9 changed files with 85 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/check-attachment-attribution.security Normal file
View file

@ -0,0 +1 @@
CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID