peezy-tech/jojo
2
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2026-05-12 22:10:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[v15.0/forgejo] fix(activitypub): only return public activities on request (#12533)

Browse source 
Manual backport of #12382

The endpoint returning individual activities was missing access control checks, since IDs are sequential, this is not ideal.

Fixes #12333

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/12533
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
This commit is contained in:
famfo 2026-05-12 04:57:33 +02:00 • committed by Gusted
parent 97a0ab9833
commit 4e40eede03
10 changed files with 156 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

2
models/fixtures/action.yml
View file

@ -81,4 +81,4 @@
act_user_id: 40
repo_id: 60 # public
is_private: false
created_unix: 1577404800 # end of heatmap
created_unix: 1577404800 # end of heatmap