techhub/mastodon
2
0
Fork 0
Code Activity

Merge commit from fork

Browse Source 
* Refuse granting quote authorization for reblogs

* Add validation to reject quotes of reblogs

* Do not process quotes of reblogs as potentially valid quotes

* Refuse to serve quoted reblogs over REST API
This commit is contained in:
Claire
2025-10-21 15:00:28 +02:00
committed by GitHub
parent 2b9e4294fe
commit 405a49df44
8 changed files with 146 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/concerns/status/interaction_policy_concern.rb
View File

@@ -27,7 +27,7 @@ module Status::InteractionPolicyConcern
# Returns `:automatic`, `:manual`, `:unknown` or `:denied`
def quote_policy_for_account(other_account, preloaded_relations: {})
return :denied if other_account.nil? || direct_visibility?
return :denied if other_account.nil? || direct_visibility? || reblog?
following_author = nil
followed_by_author = nil