jeena/PeerTube
1
0
Fork 0
Code Issues Pull requests Projects Packages Wiki Activity Actions

Don't leak unlisted videos in comments feed

Browse source
This commit is contained in:
Chocobozzz 2020-04-21 09:01:39 +02:00
parent b3af2601da
commit 68b6fd21b1
No known key found for this signature in database
GPG key ID: 583A612D890159BE
3 changed files with 18 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server/controllers/feeds.ts
View file

@ -67,7 +67,7 @@ async function generateVideoCommentsFeed (req: express.Request, res: express.Res
const feed = initFeed(name, description)
// Adding video items to the feed, one at a time
comments.forEach(comment => {
for (const comment of comments) {
const link = WEBSERVER.URL + comment.getCommentStaticPath()
let title = comment.Video.name
@ -89,7 +89,7 @@ async function generateVideoCommentsFeed (req: express.Request, res: express.Res
author,
date: comment.createdAt
})
})
}
// Now the feed generation is done, let's send it!
return sendFeed(feed, req, res)