From 739b715c29fadb2f7d1b63961d6bd7577537d740 Mon Sep 17 00:00:00 2001 From: multiple creatures Date: Tue, 4 Feb 2020 20:48:02 -0600 Subject: outright throw 404 if rss is disabled --- app/controllers/accounts_controller.rb | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) (limited to 'app') diff --git a/app/controllers/accounts_controller.rb b/app/controllers/accounts_controller.rb index f29be82c9..7af95b51c 100644 --- a/app/controllers/accounts_controller.rb +++ b/app/controllers/accounts_controller.rb @@ -43,12 +43,10 @@ class AccountsController < ApplicationController format.rss do expires_in 1.minute, public: true - if current_account&.user&.allows_rss? - @statuses = filtered_statuses.without_reblogs.without_replies.limit(PAGE_SIZE) - @statuses = cache_collection(@statuses, Status) - else - @statuses = [] - end + not_found unless current_account&.user&.allows_rss? + + @statuses = filtered_statuses.without_reblogs.without_replies.limit(PAGE_SIZE) + @statuses = cache_collection(@statuses, Status) render xml: RSS::AccountSerializer.render(@account, @statuses, params[:tag]) end -- cgit