Compare commits

...

1 commit

Author SHA1 Message Date
Effy Elden
063fff4041
Prevent unauthenticated access to tag timelines if timeline_preview is disabled 2022-12-21 13:58:32 +11:00

View file

@ -1,6 +1,7 @@
# frozen_string_literal: true
class Api::V1::Timelines::TagController < Api::BaseController
before_action :require_user!, only: [:show], if: :require_auth?
before_action :load_tag
after_action :insert_pagination_headers, unless: -> { @statuses.empty? }
@ -10,6 +11,10 @@ class Api::V1::Timelines::TagController < Api::BaseController
end
private
def require_auth?
!Setting.timeline_preview
end
def load_tag
@tag = Tag.find_normalized(params[:id])