diff options
| author | winter | 2025-01-27 21:34:46 +0000 |
|---|---|---|
| committer | winter | 2025-01-27 21:34:46 +0000 |
| commit | 4c66a437d3125ef1a03bac96b80c82e9da060a81 (patch) | |
| tree | 9a1f98f9b31f8a9045b1fb975e3f1b8d4e3fa9de | |
| parent | 8fc56f62bad41a30060b527ee2707c07946e0edf (diff) | |
stop notes being leaked on thread pages
| -rw-r--r-- | templates/thread_page.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/thread_page.php b/templates/thread_page.php index cec94e2..5237f6c 100644 --- a/templates/thread_page.php +++ b/templates/thread_page.php @@ -16,7 +16,7 @@ call_template('skeleton', [ $notes = Note::findAllInThread($targetNote->threadApex ?? $targetNote); $user = UserAccount::findByCurrentSession(); foreach ($notes as $n) { - if (!($user != null && $user->actor->blocks($n->author))) { + if (!($user != null && $user->actor->blocks($n->author)) && $n->isViewableBy($user)) { call_template('note', ['note' => $n, 'selected' => $n == $targetNote]); } } |
