posts: fix IP leak in /posts.json includes.
This leaks the full post object in the error message, which includes the uploader's IP: * https://danbooru.donmai.us/posts/4871548.json?only=updater
This commit is contained in:
@@ -1359,7 +1359,7 @@ class Post < ApplicationRecord
|
||||
def self.available_includes
|
||||
# attributes accessible through the ?only= parameter
|
||||
%i[
|
||||
uploader updater approver upload flags appeals parent children notes
|
||||
uploader approver upload flags appeals parent children notes
|
||||
comments approvals disapprovals replacements pixiv_ugoira_frame_data
|
||||
artist_commentary
|
||||
]
|
||||
|
||||
Reference in New Issue
Block a user