summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/api/endpoints
diff options
context:
space:
mode:
authorHazelnoot <acomputerdog@gmail.com>2025-06-10 19:56:36 -0400
committerHazelnoot <acomputerdog@gmail.com>2025-06-10 20:07:01 -0400
commit8f5212e453f7d20d1422fe5715e66d0b4a4610de (patch)
tree856f72c430960622227e56decda2f43f2bd2826c /packages/backend/src/server/api/endpoints
parentenforce DM visibility in generateVisibilityQuery (diff)
downloadsharkey-8f5212e453f7d20d1422fe5715e66d0b4a4610de.tar.gz
sharkey-8f5212e453f7d20d1422fe5715e66d0b4a4610de.tar.bz2
sharkey-8f5212e453f7d20d1422fe5715e66d0b4a4610de.zip
enforce DM visibility in notes/mentions
Diffstat (limited to 'packages/backend/src/server/api/endpoints')
-rw-r--r--packages/backend/src/server/api/endpoints/notes/mentions.ts5
1 files changed, 2 insertions, 3 deletions
diff --git a/packages/backend/src/server/api/endpoints/notes/mentions.ts b/packages/backend/src/server/api/endpoints/notes/mentions.ts
index a52f35cde6..f30e5a583f 100644
--- a/packages/backend/src/server/api/endpoints/notes/mentions.ts
+++ b/packages/backend/src/server/api/endpoints/notes/mentions.ts
@@ -79,14 +79,13 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
, 'source')
.innerJoin(MiNote, 'note', 'note.id = source.id');
- // Mentioned or visible users can always access
- //this.queryService.generateVisibilityQuery(query, me);
+ this.queryService.generateVisibilityQuery(qb, me);
this.queryService.generateBlockedHostQueryForNote(qb);
this.queryService.generateMutedUserQueryForNotes(qb, me);
this.queryService.generateMutedNoteThreadQuery(qb, me);
this.queryService.generateBlockedUserQueryForNotes(qb, me);
// A renote can't mention a user, so it will never appear here anyway.
- //this.queryService.generateMutedUserRenotesQueryForNotes(query, me);
+ //this.queryService.generateMutedUserRenotesQueryForNotes(qb, me);
if (ps.visibility) {
qb.andWhere('note.visibility = :visibility', { visibility: ps.visibility });