Add visible check.

This commit is contained in:
KN4CK3R 2022-04-22 13:55:58 +00:00 committed by Anthony Wang
parent 523ca3d89b
commit 0d120f8a8d
Signed by: a
GPG key ID: BC96B00AEC5F2D76

View file

@ -85,7 +85,10 @@ func WebfingerQuery(ctx *context.Context) {
return
}
// Should we check IsUserVisibleToViewer here?
if !user_model.IsUserVisibleToViewer(u, ctx.Doer) {
ctx.Error(http.StatusNotFound)
return
}
aliases := make([]string, 0, 1)
if !u.KeepEmailPrivate {