diff options
author | Chocobozzz <me@florianbigard.com> | 2020-04-21 09:01:39 +0200 |
---|---|---|
committer | Chocobozzz <me@florianbigard.com> | 2020-04-21 09:01:39 +0200 |
commit | 68b6fd21b19ef17274e84dbb21ad7cfb7bc6c36a (patch) | |
tree | 81fa180f180f2cc3a2a7ec665a568acc8df3ce57 /server/controllers/feeds.ts | |
parent | b3af2601da92a6c0835cb2473b4c7a41a0d86e98 (diff) | |
download | PeerTube-68b6fd21b19ef17274e84dbb21ad7cfb7bc6c36a.tar.gz PeerTube-68b6fd21b19ef17274e84dbb21ad7cfb7bc6c36a.tar.zst PeerTube-68b6fd21b19ef17274e84dbb21ad7cfb7bc6c36a.zip |
Don't leak unlisted videos in comments feed
Diffstat (limited to 'server/controllers/feeds.ts')
-rw-r--r-- | server/controllers/feeds.ts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/server/controllers/feeds.ts b/server/controllers/feeds.ts index 72628dffb..cb82bfc6d 100644 --- a/server/controllers/feeds.ts +++ b/server/controllers/feeds.ts | |||
@@ -67,7 +67,7 @@ async function generateVideoCommentsFeed (req: express.Request, res: express.Res | |||
67 | const feed = initFeed(name, description) | 67 | const feed = initFeed(name, description) |
68 | 68 | ||
69 | // Adding video items to the feed, one at a time | 69 | // Adding video items to the feed, one at a time |
70 | comments.forEach(comment => { | 70 | for (const comment of comments) { |
71 | const link = WEBSERVER.URL + comment.getCommentStaticPath() | 71 | const link = WEBSERVER.URL + comment.getCommentStaticPath() |
72 | 72 | ||
73 | let title = comment.Video.name | 73 | let title = comment.Video.name |
@@ -89,7 +89,7 @@ async function generateVideoCommentsFeed (req: express.Request, res: express.Res | |||
89 | author, | 89 | author, |
90 | date: comment.createdAt | 90 | date: comment.createdAt |
91 | }) | 91 | }) |
92 | }) | 92 | } |
93 | 93 | ||
94 | // Now the feed generation is done, let's send it! | 94 | // Now the feed generation is done, let's send it! |
95 | return sendFeed(feed, req, res) | 95 | return sendFeed(feed, req, res) |