aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMario <mario@mariovavti.com>2023-05-29 18:16:38 +0000
committerMario <mario@mariovavti.com>2023-05-29 18:16:38 +0000
commitbc6aded074156ec81084334a4d6aa58bc0f37a68 (patch)
tree68d476677c55e717bd24076f9e429229a41f7917
parent904401617a4f4ea866668bcedd6a1f52c60d9ee0 (diff)
downloadvolse-hubzilla-bc6aded074156ec81084334a4d6aa58bc0f37a68.tar.gz
volse-hubzilla-bc6aded074156ec81084334a4d6aa58bc0f37a68.tar.bz2
volse-hubzilla-bc6aded074156ec81084334a4d6aa58bc0f37a68.zip
fix a possible privacy mismatch
-rw-r--r--Zotlabs/Lib/Activity.php10
1 files changed, 10 insertions, 0 deletions
diff --git a/Zotlabs/Lib/Activity.php b/Zotlabs/Lib/Activity.php
index c2acff83f..8f5f385ef 100644
--- a/Zotlabs/Lib/Activity.php
+++ b/Zotlabs/Lib/Activity.php
@@ -3131,6 +3131,16 @@ class Activity {
}
}
+ // private conversation, but this comment went rogue and was published publicly
+ // hide it from everybody except the channel owner
+
+ if (intval($parent[0]['item_private'])) {
+ if (!intval($item['item_private'])) {
+ $item['item_private'] = intval($parent_item['item_private']);
+ $item['allow_cid'] = '<' . $channel['channel_hash'] . '>';
+ $item['allow_gid'] = $item['deny_cid'] = $item['deny_gid'] = '';
+ }
+ }
}
// An ugly and imperfect way to recognise a mastodon direct message