back round 0 view raw

appview/notifications: secure count method #948

merged
opened by moshyfawn.dev targeting master from moshyfawn.dev/core: fix/private-notifications-count-method
options
unified split
Changed files
+1
appview
notifications
notifications.go
+1
appview/notifications/notifications.go
··· 92 func (n *Notifications) getUnreadCount(w http.ResponseWriter, r *http.Request) { 93 user := n.oauth.GetUser(r) 94 if user == nil { 95 return 96 } 97
··· 92 func (n *Notifications) getUnreadCount(w http.ResponseWriter, r *http.Request) { 93 user := n.oauth.GetUser(r) 94 if user == nil { 95 + http.Error(w, "Forbidden", http.StatusUnauthorized) 96 return 97 } 98