Disallow remote users from viewing local-only toots

2018-07-31 15:00:08 +02:00 · 2018-07-31 15:00:08 +02:00 · 919fc15097
parent 517b7a028d
commit 919fc15097
1 changed files with 1 additions and 1 deletions
--- a/app/policies/status_policy.rb
+++ b/app/policies/status_policy.rb
@ -12,7 +12,7 @@ class StatusPolicy < ApplicationPolicy
  end

  def show?
-    return false if local_only? && current_account.nil?
+    return false if local_only? && (current_account.nil? || !current_account.local?)

    if direct?
      owned? || mention_exists?