Fix potential private status leak (#10969)

This commit is contained in:
ThibG 2019-06-05 13:40:20 +02:00 committed by Eugen Rochko
parent 1fee4b0fe2
commit e80cb67ed7

View file

@ -27,7 +27,7 @@ class StatusesController < ApplicationController
def show
respond_to do |format|
format.html do
unless user_signed_in?
if current_account.nil?
skip_session!
expires_in 10.seconds, public: true
end