Skip to content

Reject block/unblock from deactivated users in BlockNotificationPolicy

NEETzsche requested to merge NEETzsche/soapbox:reject-blocks-from-deactivated-users into develop

I uncovered a bug. If you deactivate a user, and then they spam your server with block/unblock actions, they get through and the blocks/unblocks are actually made. Pete did this by inundating my instance to activate my block bot.

Edited by NEETzsche

Merge request reports