Fix potential private status leak (mastodon#10969)

Origin-Creative · Jun 5, 2019 · e57ae42 · e57ae42
1 parent 2c1bb7d
commit e57ae42
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/statuses_controller.rb b/app/controllers/statuses_controller.rb
@@ -27,7 +27,7 @@ class StatusesController < ApplicationController
   def show
     respond_to do |format|
       format.html do
-        unless user_signed_in?
+        if current_account.nil?
           skip_session!
           expires_in 10.seconds, public: true
         end