mistykey/packages/backend/src/server/api/endpoints/ap
Julia Johannesen cbf8cc376e
fix: primitive 18: ap/get bypasses access checks
One might argue that we could make this one actually preform access
checks against the returned activity object, but I feel like that's a
lot more work than just restricting it to administrators, since, to me
at least, it seems more like a debugging tool than anything else.
2024-11-20 19:17:25 -05:00
..
get.ts fix: primitive 18: ap/get bypasses access checks 2024-11-20 19:17:25 -05:00
show.ts fix: primitive 13: check attribution against actor in notes 2024-11-20 19:17:25 -05:00