FreeFeed / freefeed-server

FreeFeed server
https://freefeed.net
MIT License
41 stars 18 forks source link

Fix a realtime privacy leakage #661

Closed davidmz closed 7 months ago

davidmz commented 7 months ago

Fixed a realtime bug that caused data leakage via the 'post:update' and 'post:destroy' events.

The sample scenario was as follows:

In this case, the UserA could receive the 'post:update' event with the full content of updated post (which is normally not available to him).