about summary refs log tree commit diff
path: root/app/controllers/authorize_interactions_controller.rb
diff options
context:
space:
mode:
authorEugen Rochko <eugen@zeonfederated.com>2019-06-04 20:10:26 +0200
committermultiple creatures <dev@multiple-creature.party>2019-11-19 16:25:28 -0600
commit298221116757f394bd00855028472bd5241a6db0 (patch)
tree11f8fac4a6e97019ee7e25c3a834f472dd71a672 /app/controllers/authorize_interactions_controller.rb
parent0ba9ba56f3a253f8314b1dfd43b626bbf942e158 (diff)
Fix poll API not requiring authentication on non-public polls (#10960)
* Fix poll API not requiring authentication on non-public polls

That API does not reveal the content of the status, i.e. the question
itself, nor who the author is, nor which status it belongs to, but it
does reveal the poll options and how many answers they got

Fix #10959

* Add test
Diffstat (limited to 'app/controllers/authorize_interactions_controller.rb')
0 files changed, 0 insertions, 0 deletions