thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions

fix POST /{owner}/{repo}/comments/{id}/delete

Browse source 
(cherry picked from commit 1b57d8493882d9d659164acd3b4a5a99c769d8ed)
This commit is contained in:
Loïc Dachary 2023-11-02 16:41:34 +01:00
parent 9c4dab8940
commit d0d82e0bb7
No known key found for this signature in database
GPG key ID: 992D23B392F9E4F2
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
routers/web/repo/issue.go
View file

@ -3164,6 +3164,11 @@ func DeleteComment(ctx *context.Context) {
return
}
if comment.Issue.RepoID != ctx.Repo.Repository.ID {
ctx.NotFound("CompareRepoID", issues_model.ErrCommentNotExist{})
return
}
if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.CanWriteIssuesOrPulls(comment.Issue.IsPull)) {
ctx.Error(http.StatusForbidden)
return