posts: fix IP leak in /posts.json includes.

This leaks the full post object in the error message, which includes the
uploader's IP:

* https://danbooru.donmai.us/posts/4871548.json?only=updater
This commit is contained in:
evazion
2021-10-27 02:36:24 -05:00
parent e697d1886d
commit a607cb1cb1

View File

@@ -1359,7 +1359,7 @@ class Post < ApplicationRecord
def self.available_includes
# attributes accessible through the ?only= parameter
%i[
uploader updater approver upload flags appeals parent children notes
uploader approver upload flags appeals parent children notes
comments approvals disapprovals replacements pixiv_ugoira_frame_data
artist_commentary
]