forked from rDrama/rDrama
don't let users comment on things they can't see
parent
48384ba8e5
commit
0627a12bc5
|
@ -164,6 +164,7 @@ def comment(v):
|
||||||
if parent.author_id == v.id: rts = True
|
if parent.author_id == v.id: rts = True
|
||||||
else: abort(400)
|
else: abort(400)
|
||||||
|
|
||||||
|
if not parent.can_see(v): abort(404)
|
||||||
if parent.deleted_utc != 0: abort(404)
|
if parent.deleted_utc != 0: abort(404)
|
||||||
|
|
||||||
body = request.values.get("body", "").strip().replace('','')
|
body = request.values.get("body", "").strip().replace('','')
|
||||||
|
|
Loading…
Reference in New Issue