luna/mastodon
0
0
Fork 0
mirror of https://github.com/lunaisnotaboy/mastodon.git synced 2024-12-20 12:19:27 +00:00
Code Issues Projects Releases Wiki Activity

Add test to disallow remote users from fetching local-only toots

Browse source
This commit is contained in:
Thibaut Girka 2018-07-31 14:57:41 +02:00 committed by ThibG
parent 9d09c7cc68
commit 9f2945ef80
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
spec/policies/status_policy_spec.rb
View file

@ -77,6 +77,12 @@ RSpec.describe StatusPolicy, type: :model do
expect(subject).to_not permit(nil, status)
end
it 'denies access when local-only and the viewer is from another domain' do
viewer = Fabricate(:account, domain: 'remote-domain')
allow(status).to receive(:local_only?) { true }
expect(subject).to_not permit(viewer, status)
end
end
permissions :reblog? do