Fix potential private status leak (mastodon#10969)

ProjectMyosotis · Oct 2, 2019 · 101fb04 · 101fb04
1 parent f7a8501
commit 101fb04
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/statuses_controller.rb b/app/controllers/statuses_controller.rb
@@ -27,7 +27,7 @@ class StatusesController < ApplicationController
   def show
     respond_to do |format|
       format.html do
-        unless user_signed_in?
+        if current_account.nil?
           skip_session!
           expires_in 10.seconds, public: true
         end