fix: reject spiders on remote profile GETs

This commit is contained in:
Julian Lam
2024-01-26 11:28:19 -05:00
parent 25434d2a6e
commit a355c05d83

View File

@@ -7,6 +7,10 @@ const pagination = require('../../pagination');
const controller = module.exports;
controller.get = async function (req, res, next) {
if (req.uid === -1) {
return helpers.notAllowed(req, res);
}
const { userslug: uid } = req.params;
const actor = await getActor(req.uid, uid);
if (!actor) {
@@ -18,6 +22,10 @@ controller.get = async function (req, res, next) {
};
controller.getFollow = async function (tpl, name, req, res) {
if (req.uid === -1) {
return helpers.notAllowed(req, res);
}
const actor = await getActor(req.uid, req.params.userslug);
const { userslug } = req.params;