mirror of
https://codeberg.org/streams/streams.git
synced 2024-09-20 05:35:12 +00:00
more on the DM leakage bug
This commit is contained in:
parent
fc63913421
commit
59a47e2835
1 changed files with 11 additions and 4 deletions
|
@ -109,10 +109,17 @@ function collect_recipients($item, &$private_envelope,$include_groups = true) {
|
|||
}
|
||||
}
|
||||
|
||||
$r = ThreadListener::fetch_by_target($item['parent_mid']);
|
||||
if($r) {
|
||||
foreach($r as $rv) {
|
||||
$recipients[] = $rv['portable_id'];
|
||||
// Forward to thread listeners, *unless* there is even a remote hint that the item
|
||||
// might have some privacy attached. This could be (for instance) an ActivityPub DM
|
||||
// in the mioddle fo a public thread. Unless we can guarantee beyond all doubt that
|
||||
// this is public, don't allow it to go to thread listeners.
|
||||
|
||||
if(! intval($item['item_private'])) {
|
||||
$r = ThreadListener::fetch_by_target($item['parent_mid']);
|
||||
if($r) {
|
||||
foreach($r as $rv) {
|
||||
$recipients[] = $rv['portable_id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in a new issue