IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: do not send push notifications to suspended users

Browse Source
This commit is contained in:
Sam Saffron
2017-04-05 08:28:24 -04:00
parent 9065df76ad
commit cd39049262
2 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/services/post_alerter.rb
View File

@@ -373,7 +373,7 @@ class PostAlerter
post_action_id: opts[:post_action_id],
data: notification_data.to_json)
if !existing_notification && NOTIFIABLE_TYPES.include?(type)
if !existing_notification && NOTIFIABLE_TYPES.include?(type) && !user.suspended?
# we may have an invalid post somehow, dont blow up
post_url = original_post.url rescue nil
if post_url