github/reddit
1
1
Fork 0
mirror of https://github.com/reddit-archive/reddit.git synced 2026-01-27 15:58:06 -05:00
Code Issues Packages Projects Releases Wiki Activity

Abort with 403 for toolbar links to private SRs

Browse Source
This commit is contained in:
Keith Mitchell
2012-08-10 13:01:24 -07:00
parent 9bfed16203
commit 07fa695857
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
r2/r2/controllers/toolbar.py
View File

@@ -100,12 +100,15 @@ class ToolbarController(RedditController):
"/tb/$id36, show a given link with the toolbar"
if not link:
return self.abort404()
elif link.is_self or not link.subreddit_slow.can_view(c.user):
elif link.is_self:
return self.redirect(link.url)
# if the domain is shame-banned, bail out.
if is_shamed_domain(link.url, request.ip)[0]:
self.abort404()
if not link.subreddit_slow.can_view(c.user):
self.abort403()
if link.has_thumbnail:
thumbnail = thumbnail_url(link)