eightequal/AstralRinth
1
0
Fork 0
forked from didirus/AstralRinth
Code Pull Requests Activity

fix(labrinth): hide hidden orgs from user profiles (#4452)

Browse Source 
This is a follow-up to PR #4426. I initially didn't consider the
organizations an user belongs to as worth hiding, but given that user
profiles can be public, I suppose there technically is a way to exploit
them for SEO abuse. Overall, it also seems more consistent to hide them
here too.
This commit is contained in:
Alejandro González
2025-09-30 16:30:44 +02:00
committed by GitHub
parent 54747aa628
commit 895b040ad7
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
apps/labrinth/src/routes/v3/users.rs
View File

@@ -3,8 +3,8 @@ use std::{collections::HashMap, sync::Arc};
use super::{ApiError, oauth_clients::get_user_clients}; use super::{ApiError, oauth_clients::get_user_clients};
use crate::{ use crate::{
auth::{ auth::{
filter_visible_collections, filter_visible_projects, checks::is_visible_organization, filter_visible_collections,
get_user_from_headers, filter_visible_projects, get_user_from_headers,
}, },
database::{models::DBUser, redis::RedisPool}, database::{models::DBUser, redis::RedisPool},
file_hosting::{FileHost, FileHostPublicity}, file_hosting::{FileHost, FileHostPublicity},
@@ -315,6 +315,10 @@ pub async fn orgs_list(
} }
for data in organizations_data { for data in organizations_data {
if !is_visible_organization(&data, &user, &pool, &redis).await? {
continue;
}
let members_data = let members_data =
team_groups.remove(&data.team_id).unwrap_or(vec![]); team_groups.remove(&data.team_id).unwrap_or(vec![]);
let logged_in = user let logged_in = user