From df1c0bc8537dd57c10040925fac62f7acb785736 Mon Sep 17 00:00:00 2001 From: multiple creatures Date: Thu, 27 Feb 2020 12:46:59 -0600 Subject: **MAJOR**: fix posts with `hidden` flag being visible from profile pages (thanks @Brainship) --- app/controllers/accounts_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/accounts_controller.rb b/app/controllers/accounts_controller.rb index dd19e2498..b034a1710 100644 --- a/app/controllers/accounts_controller.rb +++ b/app/controllers/accounts_controller.rb @@ -97,7 +97,7 @@ class AccountsController < ApplicationController end return scope if current_user return Status.none unless @account&.user - scope.where(created_at: @account.user.max_public_history.to_i.days.ago..Time.current) + scope.where(hidden: false, created_at: @account.user.max_public_history.to_i.days.ago..Time.current) end def default_statuses -- cgit