Disable providers of user and status metadata when instance is private

2020-08-31 14:35:22 -05:00 · 2020-08-31 14:35:22 -05:00 · ff07014b26
commit ff07014b26
parent 630444ee08
3 changed files with 22 additions and 2 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -16,6 +16,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).

 ## unreleased-patch - ???

+### Security
+- Fix metadata leak for accounts and statuses on private instances
+
 ### Added

 - Rich media failure tracking (along with `:failure_backoff` option)