mirror of
https://github.com/vichan-devel/vichan.git
synced 2024-12-11 23:36:02 +01:00
3da946268a
Imagine the following scenario: Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B. If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
8 lines
256 B
HTML
8 lines
256 B
HTML
{% if config.poster_ids %}
|
|
{% if post.thread %}
|
|
ID: <span class="poster_id">{{ poster_id(post.ip, post.thread, board.uri) }}</span>
|
|
{% else %}
|
|
ID: <span class="poster_id">{{ poster_id(post.ip, post.id, board.uri) }}</span>
|
|
{% endif %}
|
|
{% endif %}
|