Fix potential private status leak (#10969)
This commit is contained in:
		
							parent
							
								
									d34a3a2cc7
								
							
						
					
					
						commit
						7fa23ec697
					
				
					 1 changed files with 1 additions and 1 deletions
				
			
		| 
						 | 
				
			
			@ -27,7 +27,7 @@ class StatusesController < ApplicationController
 | 
			
		|||
  def show
 | 
			
		||||
    respond_to do |format|
 | 
			
		||||
      format.html do
 | 
			
		||||
        unless user_signed_in?
 | 
			
		||||
        if current_account.nil?
 | 
			
		||||
          skip_session!
 | 
			
		||||
          expires_in 10.seconds, public: true
 | 
			
		||||
        end
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
		Reference in a new issue