From 44f25920280d15fc49611065937dda65853439f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Dachary?= <loic@dachary.org>
Date: Thu, 2 Nov 2023 16:41:34 +0100
Subject: [PATCH] fix POST /{owner}/{repo}/comments/{id}/delete

(cherry picked from commit 1b57d8493882d9d659164acd3b4a5a99c769d8ed)
---
 routers/web/repo/issue.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/routers/web/repo/issue.go b/routers/web/repo/issue.go
index 7cb57b3628..9f78cb8e0a 100644
--- a/routers/web/repo/issue.go
+++ b/routers/web/repo/issue.go
@@ -3037,6 +3037,11 @@ func DeleteComment(ctx *context.Context) {
 		return
 	}
 
+	if comment.Issue.RepoID != ctx.Repo.Repository.ID {
+		ctx.NotFound("CompareRepoID", issues_model.ErrCommentNotExist{})
+		return
+	}
+
 	if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.CanWriteIssuesOrPulls(comment.Issue.IsPull)) {
 		ctx.Error(http.StatusForbidden)
 		return