Mercurial > rsstweet
diff app/controllers/tweets_controller.rb @ 235:4222343d9433 legit-client
No access to protected user
author | nanaya <me@nanaya.net> |
---|---|
date | Fri, 14 Jul 2023 22:43:40 +0900 |
parents | 7a773720d81f |
children |
line wrap: on
line diff
--- a/app/controllers/tweets_controller.rb Fri Jul 14 22:42:20 2023 +0900 +++ b/app/controllers/tweets_controller.rb Fri Jul 14 22:43:40 2023 +0900 @@ -13,6 +13,11 @@ return end + if @user[:protected] + head :forbidden + return + end + return redirect if normalized_screen_name != params[:name] @tweets = CachedFetch.timeline params[:id]