skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix: Mod-only information leaked via the API. (#696)

Browse source
This commit is contained in:
Ben Rog-Wilhelm 2023-09-04 23:09:54 -05:00 • committed by GitHub
parent 41497958b6
commit 75edfe8b31
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 10 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

12
files/classes/comment.py
View file

@ -213,9 +213,6 @@ class Comment(CreatedBase):
@property
@lazy
def json_raw(self):
flags = {}
for f in self.flags(None): flags[f.user.username] = f.reason
data= {
'id': self.id,
'level': self.level,
@ -230,12 +227,13 @@ class Comment(CreatedBase):
'is_pinned': self.is_pinned,
'distinguish_level': self.distinguish_level,
'post_id': self.post.id if self.post else 0,
'score': self.score,
'upvotes': self.upvotes,
'downvotes': self.downvotes,
'is_bot': self.is_bot,
'flags': flags,
}
if not self.should_hide_score:
data['score'] = self.score
data['upvotes'] = self.upvotes
data['downvotes'] = self.downvotes
return data