mastodon/app/controllers/api/v1/statuses
Claire 4fb4721072
Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-04 16:26:49 +02:00
..
bookmarks_controller.rb
favourited_by_accounts_controller.rb Change unauthenticated responses to be cached in REST API (#24348) 2023-04-25 15:41:34 +02:00
favourites_controller.rb Wrong count in response when removing favourite/reblog (#24365) 2023-07-19 09:02:30 +02:00
histories_controller.rb Change /api/v1/statuses/:id/history to always return at least one item (#25510) 2023-06-22 14:56:14 +02:00
mutes_controller.rb
pins_controller.rb
reblogged_by_accounts_controller.rb Change unauthenticated responses to be cached in REST API (#24348) 2023-04-25 15:41:34 +02:00
reblogs_controller.rb Wrong count in response when removing favourite/reblog (#24365) 2023-07-19 09:02:30 +02:00
sources_controller.rb Add support for editing for published statuses (#16697) 2022-01-19 22:37:27 +01:00
translations_controller.rb Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00