mastodon/app/controllers/api/v1
Claire 502cf75b16
Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-04 16:26:49 +02:00
..
accounts
admin
announcements
apps
crypto
emails
featured_tags
instances
lists
notifications
peers
polls
profile
push
statuses Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00
timelines Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00
trends
accounts_controller.rb
announcements_controller.rb
annual_reports_controller.rb
apps_controller.rb
blocks_controller.rb
bookmarks_controller.rb
conversations_controller.rb
custom_emojis_controller.rb
directories_controller.rb
domain_blocks_controller.rb
endorsements_controller.rb
favourites_controller.rb
featured_tags_controller.rb
filters_controller.rb
follow_requests_controller.rb
followed_tags_controller.rb
instances_controller.rb
invites_controller.rb
lists_controller.rb
markers_controller.rb
media_controller.rb
mutes_controller.rb
notifications_controller.rb
polls_controller.rb
preferences_controller.rb
reports_controller.rb
scheduled_statuses_controller.rb Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00
statuses_controller.rb
streaming_controller.rb
suggestions_controller.rb
tags_controller.rb