search

crabber-net / crabber

A Twitter clone written in Python + Flask with extended features and a focus on inclusivity.
https://crabber.net
GNU General Public License v2.0
48 stars 16 forks source link

Blocked users can interact with my posts #132

Closed t34z closed 3 years ago

t34z commented 3 years ago

Describe the bug Blocked users can view and interact with my molts given they encounter them through someone's remolt.

To Reproduce Steps to reproduce the behavior: You'll need three accounts.

  1. Block account A from account B.
  2. On account C, remolt one of account Bs molts.
  3. On account A you should be able to see, remolt, and like account Bs molt through account Cs proflie

Expected behavior Blocked users wouldn't be able to see my molts at all, much less like or remolt them.

Desktop: