Skip to content

Conversation

@alphatownsman
Copy link

it's a security issue: if a user edit a DM via API request, the post will be made public, the visibility change will be ignore by other server, but locally the DM is publicly viewable.

@dcwatson dcwatson merged commit 43d416c into avaraline:main Jun 3, 2025
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants